Matt, Some of the Zyxel ZyAIR line of APs and bridges also include "disable intra-BSS" feature. Note this is the Zyxel engineered wireless gear, not the Handlink ODM box. Nice if you want to stop chatty Windows notebooks from talking, either for enhanced hotspot security (for those customers without a software firewall on their notebook), or to conserve wireless bandwidth. I *think* it works using packet filtering.
I've used Zyxel Zyair B-3000 as an AP and the feature works well. There are several other nice features like POE, transmit power control, multi-ESSID and VLAN support, scan for open channel, WDS, local user database for EAP-MD5, and ability to limit # of associating stations. The b-3000 uses ZyDAS radio (ZyDAS is fabless semi spinout of Zyxel). With multi-ESSID you can configure 8 ESSIDs, and each can be VLAN tagged to work with a VLAN switch. Each ESSID has independent VLAN tag and WEP keys. Of course standard features like MAC filtering, 802.1x/RADIUS, roaming and removable antennas are also supported. The WDS bridging works with b-420 or another b-3000. Haven't tried it with any other WDS gear. For more details checkout the users guide. PC Connection sells it for about $135 delivered to my door. ftp://ftp.us.zyxel.com/ZyAIR_B-3000/document/ZyAIR_B-3000_3.50_UsersGuide.pd f Brian > -----Original Message----- > From: Matt Peterson [mailto:[EMAIL PROTECTED] > Sent: Friday, December 19, 2003 2:39 AM > To: [EMAIL PROTECTED] > Subject: [BAWUG] inter-VLAN (single STA to AP traffic only) > > > I've found a number of 'Hotspot-in-a-box' units have a feature marketed > as 'inter-VLAN security'. Essentially, with this enabled, STA's only > see traffic to the AP & back, not other STA's (associated to the same > AP). > > Funky indeed, 'security though obscurity'. I haven't broken out a > 802.11 frame sniffer (yet), wondering how this is technically done and > expierences deploying this? It would seem like all the Hotspot players > would jump on this, as a "security" solution. > > The most 'famous' box, seems to be Handspring's WSG-4000 (relabeled from > ZyXEL, DemarcTech, etc) > <http://www.handlink.com.tw/eng/products/hotspot/WSG4000/products_ hotspot_wsg4000.htm>. -- Matt Peterson another.geek.without.a.life [EMAIL PROTECTED] http://matt.peterson.org/ ------------------------------------------------- -- general wireless list, a bawug thing <http://www.bawug.org/> [un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless -- general wireless list, a bawug thing <http://www.bawug.org/> [un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless
