Re: [Ubnt_users] client isolation

[Tim Densmore]

So, I'm probably going to ask a few (several?) stupid questions on this list over the next couple of weeks.  We're working on redesigning a large portion of our network, and I want to make sure I'm thinking about things correctly.  I'm also trying to avoid having a network full of one-off setups for individual customers. I'm not sure what you mean here when you say build a VPN - VRF or L2/L3 MPLS VPN, or IPSEC or something else entirely? When you say build a VLAN in this case, are you building a VLAN and BVI or dot1q subint for each site and routing between them?  If so, that's essentially what we do in these cases now - assign a /29 or /30 to each customer site back at our router, but I was hoping to avoid that kind of setup if I could.  Obviously I'd prefer isolation and UNI/NNI style segregation if I can have it without breaking customers. Thanks, Tim Densmore On 08/03/2017 12:19 AM, Shawn C. Peppers wrote: You build vlan or vpn on the upstream router or switch.  No brainer.  Shawn C. Peppers Video Direct 866-680-8433 Toll Free http://www.video-direct.tv On Aug 2, 2017, at 11:52 PM, Tim Densmore <tdensm...@tarpit.cybermesa.com> wrote: So, how do you handle situations where you have two customers on the same AP who want to pass traffic between sites? On 08/02/2017 07:00 PM, Adair Winter wrote: Yep, we use it on switch ports also. Keeps traffic from going between the sectors and forces it up stream On Aug 2, 2017 7:58 PM, "Shawn C. Peppers" <videodirectwispal...@gmail.com> wrote: It stops traffic across the radio from station to station.  Always turn it on. Shawn C. Peppers Video Direct 866-680-8433 Toll Free http://www.video-direct.tv On Aug 2, 2017, at 7:44 PM, Jan Van Kort <j.vank...@oregononline.net> wrote: I was wondering the same thing earlier today.  What is it for? On 07/27/2017 03:37 PM, Shawn C. Peppers wrote: This is why you need to switch to pppoe.  This is why you dont bridge the customer CPE station.  Client isolation will likely not fix this issue but try it and you should have it on anyways.  Shawn C. Peppers Video Direct 866-680-8433 Toll Free http://www.video-direct.tv On Jul 27, 2017, at 5:18 PM, CBB - Jay Fuller <par...@cyberbroadband.net> wrote:     Just found i have a business on a tower that has a tp link plugged in backwards.  The invalid DHCP ranges are getting across the interface to other businesses on the same switch.  If I enable "client isolation" on the access point will it prevent this until we can reach the business? There are only two people on the access point in question.   Thanks :)     _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users

_______________________________________________
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users