Creare rete guest senza supporto vlan

Thanks.

Retired_Member, is this "client isolation" a different feature from the "client separation" documented in the WAC505 User Manual (for example) on p.36 ff.?

"By default, client separation is disabled for a WiFi network (SSID or VAP), allowing communication between WiFi clients that are associated with different WiFi networks on the access point. For additional security, you can enable client separation."

In the industry common terms, this documented "client separation" feature is usually named "client isolation". The purpose is to suppress direct communication between Wi-Fi STA within the same AP STA (or uncommonly within the same access point).

Assuming these are two different features (what I doubt, can't check because my WAC are all in Insight cloud mode): Does the "client isolation" also deny communication to other systems on the same network - WLAN, switched LAN, other WAC, ... (read TCP/IP subnetwork) only permitting communication with the default gateway so only Internet access is possible? This is the way the Guest WiFi is implemented on the Nighthawk routers - however it's a constant source of complaints, as other (W)LAN IP can be pinged, Multicast traffic is still open, and much more denying the intended purpose of an isolated guest network on the same (W)LAN - without proper VLAN separation.

Edit: In Insight (App 4.0.11, Cloud 4.0.11.3), we only have a control for "client isolation" - which is obviously for what I understand being "client isolation". While one does commnly enable this on guest networks, this does not make a Guest WiFi capability on the same subnet.