Restrict access to other WLN clients

[rsumpter]

When clients are associated to a Cisco AP, is there away to restrict the clients from sending traffic to other clients associated to the same AP?

[kka]

Yes, the feature is called "Public Secure Packet Forwarding".

This works like protected ports (Private VLAN edge) on switches,

blocking all layer 2 traffic between clients associated to the same AP.

On the GUI it's enabled/disabled under Network Interfaces->Radio...->Settings->Public Secure Packet Forwarding

With the CLI you configure "protected port" for the bridge group.

<http://www.cisco.com/en/US/partner/products/hw/wireless/ps430/products_configuration_guide_chapter09186a00804e7d2f.html#wp1038494>

[marknigh1]

Is there a similar feature in Wireless LAN controller or LWAPP APs?