Preventing Local Routing between Clients

If you have security and traffic management policies defined in upstream devices, you can disable routing traffic between two clients connected to the same IAP on different VLANs. When local routing is disabled, the clients can connect to the Internet but cannot communicate with each other, and the routing traffic between the clients is sent to the upstream device to make the forwarding decision.

You can disable local routing through the Instant UI or CLI.

In the Instant UI

To disable local routing:

1.

Navigate to System>General>Show advanced options.

2.

From the Deny local routing drop-down list, select Enabled to prevent local routing traffic between two clients connected to an IAP on different VLANs.

3.

Click OK.

In the CLI

To disable local routing:

(Instant AP)(config)# deny-local-routing

(Instant AP)(config)# end

(Instant AP)# commit apply

To deny local routing for the WLAN SSID clients:

(Instant AP)(config)# wlan ssid-profile <ssid-profile>

(Instant AP) (SSID Profile <ssid-profile>)# deny-local-routing

(Instant AP) (SSID Profile <ssid-profile>)# end

(Instant AP)# commit apply