Client Isolation - Extreme Wireless controller

[Boopaa]

Hi Team,
Does anybody have any ideas of how client isolation can be achieved for users on the same SSID and in the same vlan in Controller. I know other manufacturers have a simple Client isolation feature that will achieve this but I can't find it in Extreme Controller.
My ultimate goal is "Users have to communicate only gateway not others".
Any ideas welcome..!!!

[Rey_Juan_Carlos]

Hi to all.

We have a large problem with this solution, in our scenario, we have multiple vlans for every user collective (with Radius Filter-Id) with B@AP topologies, but if we have to make 1 rule to permit every Gateway and one rule to deny every network, we fill the capacity rules on the aps. 

¿Somebody have better solution?

Thanks a lot

[VDaniel]

Hello Craig
I did , the problem ist that the VNS is B@EWC NOT B@AP - IS a Guest VNS

[Umut_Aydin]

MU to MU also doesn't work if the client are connected on the same AP.

[Nathiya_M]

Please check the policy rule configuration for B@AP setup,

https://gtacknowledge.extremenetworks.com/articles/Solution/Block-MU-to-MU-enabled-but-users-can-sti...

Regards,
Nathiya M

[Zdeněk_Pala]

In the B@AP the "block MU to MU" does not work. You can create rule in Policy Role and allow only traffic destined to your gateway MAC and Broadcasts all other can be blocked.