As to AP user isolation, most of the higher grade APs support user isolation
in their advanced settings, Ex: D-Link 2100 or 2200 or any Senao APs would
have user isolation.


-----Original Message-----
From: Lee Sharp [mailto:leesharp at hal dash pc dot org] 
Sent: Wednesday, July 18, 2007 12:38 PM
To: Monowall Support List
Subject: Re: [m0n0wall] Isolating users with managed switch

Mark DeGroot wrote:

> This may be a little off of this topic, but has anyone implemented
> something like this on a wireless network?  I have been in coffee shops
> that have wireless access but are setup so you cant see any of the other
> wireless clients.  Anyone have ideas on how this can be accomplished
> without subnetting?

Cisco AP's support the same v-lan concept as the Cisco switches.  With a 
full Cisco environment, every connected MAC is in it's own vlan.  With 
the nexgate appliance doing the "we work with any IP" concept, people 
with static IPs can connect as well.  This is part of the Hilton hotel 
High Speed Internet Access (HSIA) requirements.

Other APs have user mode isolation.  They simply will not bridge 
wireless clients to other wireless clients.  Still works quite well, at 
a much better price.

			Lee

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch