WESM zl Management and Configuration Guide WT.01.28 and greater

4-62
Wireless Local Area Networks (WLANs)
Configuring a WLAN
For increased security, you can prevent two wireless stations in a particular WLAN
from communicating with each other. You have three options for controlling wireless
station-to-station traffic in a particular WLAN:
■ allow all inter-station traffic
When a wireless station attempts to communicate with another station in the
WLAN, the Wireless Edge Services zl Module forwards the packet toward the
second station’s RP.
■ drop all inter-station traffic
When a wireless station attempts to communicate with another station in the
WLAN, the Wireless Edge Services zl Module drops the packet.
■ forward inter-station traffic through the switch
This option allows inter-station traffic but ensures that it complies with your
network policies. When a wireless station attempts to communicate with another
station in the WLAN, the Wireless Edge Services zl Module forwards the traffic
into the wired network in the VLAN configured for that WLAN (or in the user’s
dynamic VLAN). The wireless services-enabled switch enforces any applicable
access controls and sends the packet back to the module to be forwarded to
toward the second station’s RP.
To enable inter-station blocking on a WLAN, complete these steps:
1. Access the Edit screen for the WLAN:
a. Select Network Setup > WLAN Setup and click the Configuration tab.
b. Select the WLAN and click the Edit button. The Edit screen is displayed.
2. In the Inter-station Traffic drop-down menu under Advanced, choose how the
module treats inter-station traffic:
• Drop packets
• Allow Packets
• Forward through switch
The default setting is to allow inter-station traffic.