What is Isolate members with IP?
Isolation Members with IP is a new feature that was introduced in firmware version 1.2.3 of the VigorAP series. When this setting is enabled, the AP inspects the source and destination IP addresses of packets and blocks wireless clients attempts to discover network clients by sending ICMP requests to the gateway.
There are cases when the Isolate Member setting in Wireless LAN>>General Setup is enabled, but certain wireless clients are still able to communicate with other WLAN clients. Consider the following scenario:
There is one Wireless AP on the LAN:
and 2 wireless clients:
- PC with Intel wireless WLAN card
- Smart Phone Galaxy-S7
Steps to reproduce the behaviour:
1. Connect all Wireless clients to the AP910C via Wi-Fi
2. Ping the other each Clients. Make sure clients receive replies from the others and their addresses are listed in the ARP table.
3. Enable "Isolate Member" on the AP910C.
As soon as "Isolate Member" is enabled, ping replies cease for 3 to
5 seconds, and then replies are seen once again.
Upon inspection of the ICMP packets, it was found that inquiries were sent to and replies were received from the gateway machine-the router.
To handle this unexpected behaviour, we are introducing the Isolate Members with IP setting. This setting does add processing load on the
AP, so we recommend that you enable it only when the isolate member isn’t working.
To enable "Isolate Members with IP", please go to Wireless LAN>>Advanced Settings, then enable it.