cancel
Showing results for 
Search instead for 
Did you mean: 

Isolate wireless client traffic from other clients on the same AP, does it only work for the same AP

Alleprt
New Contributor II

This literally means it works only per AP, not per network. If I have several APs on the same Unleashed, does it mean that traffic from client1 on AP1 won't be isolated from client2 on AP2? And clients are roaming. Then this rule makes little sense. Am I misunderstanding it?

1 ACCEPTED SOLUTION

Imran_ruckus
Community Manager
Community Manager

Hi @Alleprt 

Greetings!!!

Thank you for reaching out to the RUCKUS Community Forums and for the detailed explanation, that is very helpful.

We appreciate your patience and understanding as we work to resolve the issues you are experiencing with your RUCKUS setup.

Based on the information provided, it appears that you need assistance in knowing wireless client isolation from other clients on same AP.

This is a common point of confusion in Unleashed.

Your understanding is actually correct for that specific setting.
The option “Isolate wireless client traffic from other clients on the same AP” works only at the individual AP level. So clients connected to different APs (even on the same SSID/VLAN) can still communicate with each other.

Refer article link below:

https://unleashedsupport.ruckuswireless.com/articles/000001388

Because of that, in a multi-AP environment with roaming clients, this option can feel limited.

If your goal is to isolate clients across the entire network, you’ll want to use:
“Isolate wireless client traffic from all hosts on the same VLAN/subnet”

This enforces isolation network-wide, regardless of which AP the clients are connected to, and works correctly even during roaming (you can whitelist gateway or required devices as needed).

In short:

  • Same AP isolation -- per-AP only 
  • VLAN/subnet isolation -- across all APs (recommended for most deployments) 

Hope this helps clarify.

Thank you again.

If your issue has been fully addressed, please click the Kudos button and mark the responses as an Accepted Solutions.

 

 

Best regards,

Imran Sanadi

RUCKUS | Community Forums Support

View solution in original post

1 REPLY 1

Imran_ruckus
Community Manager
Community Manager

Hi @Alleprt 

Greetings!!!

Thank you for reaching out to the RUCKUS Community Forums and for the detailed explanation, that is very helpful.

We appreciate your patience and understanding as we work to resolve the issues you are experiencing with your RUCKUS setup.

Based on the information provided, it appears that you need assistance in knowing wireless client isolation from other clients on same AP.

This is a common point of confusion in Unleashed.

Your understanding is actually correct for that specific setting.
The option “Isolate wireless client traffic from other clients on the same AP” works only at the individual AP level. So clients connected to different APs (even on the same SSID/VLAN) can still communicate with each other.

Refer article link below:

https://unleashedsupport.ruckuswireless.com/articles/000001388

Because of that, in a multi-AP environment with roaming clients, this option can feel limited.

If your goal is to isolate clients across the entire network, you’ll want to use:
“Isolate wireless client traffic from all hosts on the same VLAN/subnet”

This enforces isolation network-wide, regardless of which AP the clients are connected to, and works correctly even during roaming (you can whitelist gateway or required devices as needed).

In short:

  • Same AP isolation -- per-AP only 
  • VLAN/subnet isolation -- across all APs (recommended for most deployments) 

Hope this helps clarify.

Thank you again.

If your issue has been fully addressed, please click the Kudos button and mark the responses as an Accepted Solutions.

 

 

Best regards,

Imran Sanadi

RUCKUS | Community Forums Support