Wireless client security separation is a security mechanism that isolates wireless clients from each other on the wireless network, and from wired clients on the wired network. This is a useful feature for guest networks or wireless hotspots, where wireless clients can access the Internet but not the rest of the network.
Previously on the WAC720 and WAC730 model access points, wireless client security separation was applied per radio, which when enabled, applied to all SSID's on that radio. In firmware release 3.7.10.0 we have changed the feature to work per SSID. Any SSID where you don't require isolation of clients, i.e. Corporate/Staff wireless, you can leave it disabled and just enable it on wireless networks such as a guest network or Wi-Fi hotspot.
Once the access point is upgraded to firmware 3.7.10.0 or above, any previous wireless client security separation configuration is wiped clear and a new configuration must be applied. The default setting per SSID is disabled.
Applying wireless client security separation to an SSID.
1. Login to your access point’s web browser and navigate to Configuration > Security > Profile Settings.
2. Select the radio button for the Profile Name you wish to apply wireless client security separation to and click Edit.
3. In Edit Security Profile, under Profile Definition, change Wireless Client Security Separation to Enable.
4. Click Apply.
