OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • LAN with client isolation
« previous next »
  • Print
Pages: [1]

Author Topic: LAN with client isolation  (Read 1501 times)

Antaris

  • Full Member
  • ***
  • Posts: 145
  • Karma: 13
    • View Profile
    • EVOTEK ltd.
LAN with client isolation
« on: June 15, 2021, 01:50:26 pm »
I need to set a VLAN on that clients can't see each other. Something like with 255.255.255.255 subnet mask from PPPoE ISP. Is there a way to manage it via DHCP server?
Logged
Proxmox enthusiast @home, bare metal @work.

bartjsmit

  • Hero Member
  • *****
  • Posts: 1534
  • Karma: 166
    • View Profile
Re: LAN with client isolation
« Reply #1 on: June 15, 2021, 03:03:47 pm »
You cannot stop clients from connecting across a layer 2 VLAN by imposing layer 3 IP restrictions.

If you need to separate clients, you need to put them into different VLAN's

Bart...
Logged

sorano

  • Full Member
  • ***
  • Posts: 108
  • Karma: 17
    • View Profile
Re: LAN with client isolation
« Reply #2 on: June 20, 2021, 08:47:01 pm »
Your best option is to use switches that supports port isolation (or client isolation if you use access points).
Logged
2x OPNsense 22.7.4 VM's in HA, 4x 2.10GHz, 8GB
ESXi 7.0 vSAN, VDS, vmxnet3 & VLAN
DoT, Chrony, HAProxy, Suricata, Zenarmor Home
VPN: IPSec, OpenVPN(behind HAProxy), Wireguard
MultiWAN: 500/500Mbit Fiber & LTE failover

--
Did my answer help you? Feel free to click [applaud] to the left.

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • LAN with client isolation
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2