HPE Controller 830 & 850 User Isolation Configuration

by

Customer Requirement – Client should not be able to communicate with each other.

Step 1. Configure User Isolation on Controller.
Step 2. Configure User Isolation on Access Point using Telnet.

OR

Step 2. Configure User Isolation on Access Point using MAP Configuration File.

To Enable User Isolation need to Enable on both Controller and Access Point.

Step 1. Configure User Isolation on Controller.
 system-view
[AC] user-isolation vlan 1000 enable
[AC] user-isolation vlan 1000 permit-mac C6-8E-8F-A6-0F-FB	#MAC ID of Authentication Gateway/DHCP Server #
[AC] user-isolation vlan 1001 enable
[AC] user-isolation vlan 1001 permit-mac C6-8E-8F-A6-0F-FB	#MAC ID of Authentication Gateway/DHCP Server #
[AC] user-isolation vlan 1002 enable
[AC] user-isolation vlan 1002 permit-mac C6-8E-8F-A6-0F-FB	#MAC ID of Authentication Gateway/DHCP Server #
[AC] undo user-isolation permit broadcast	#To block Broadcast Traffic#
[AC] quit
 save safely force	#To save Controller Settings #
Step 2. Configure User Isolation on Access Point using Telnet.
 
 system-view
[AC] _h
[AC-hidecmd] wlan ap-execute MPP exec-control enable		#MPP: Access Point Name #
[AC-hidecmd] wlan ap-execute MPP telnet enable		#MPP: Access Point Name #
[AC-hidecmd] quit
[AC] quit
 display wlan ap name MPP address		#MPP: Access Point Name #
 telnet 172.26.0.100	#MPP IP Address#
 system-view
[AP] user-isolation vlan 1000 enable
[AP] user-isolation vlan 1000 permit-mac C6-8E-8F-A6-0F-FB	#MAC ID of Authentication Gateway/DHCP Server #
[AP] user-isolation vlan 1001 enable
[AP] user-isolation vlan 1001 permit-mac C6-8E-8F-A6-0F-FB	#MAC ID of Authentication Gateway/DHCP Server #
[AP] user-isolation vlan 1002 enable
[AP] user-isolation vlan 1002 permit-mac C6-8E-8F-A6-0F-FB	#MAC ID of Authentication Gateway/DHCP Server #
[AP] undo user-isolation permit broadcast		#To block Broadcast Traffic#
[AP] quit
 save safely force	#To save AP Settings #
OR

Step 2. Configure User Isolation on Access Point using MAP Configuration File.
 MAP Configuration File Text:

#
user-isolation vlan 1000 enable
user-isolation vlan 1000 permit-mac C6-8E-8F-A6-0F-FB #MAC ID of Authentication Gateway/DHCP Server #
user-isolation vlan 1001 enable
user-isolation vlan 1001 permit-mac C6-8E-8F-A6-0F-FB #MAC ID of Authentication Gateway/DHCP Server #
user-isolation vlan 1002 enable
user-isolation vlan 1002 permit-mac C6-8E-8F-A6-0F-FB #MAC ID of Authentication Gateway/DHCP Server #
undo user-isolation permit broadcast #To block Broadcast Traffic#
#
Save above text with Extension .cfg

Leave a Comment