Please apply below rules in WLAN profile in addition to Client Isolation and Drop multicast:
| Rule | Description |
|---|---|
acl permit proto 5 tcp any any any any any |
Allow all TCP connections in both the direction |
acl permit proto 6 udp any 68 and 67 in |
Allow incoming DHCP discover packets |
acl permit proto 7 udp any 67 any any out |
Allow DHCP offer packet in WLAN out bound direction |
acl deny proto 8 udp any 137 any any any |
Block Windows NetBios packets in both the direction |
acl deny proto 9 udp any 138 any any any |
Block Windows NetBios packets in both the direction |
acl deny ip 10 any 224.0.0.0/240.0.0.0 in |
Block all incoming multicast packets |
acl deny proto 11 udp any 68 any 67 out |
Block DHCP Discover going on air |
acl deny mac 12 any 11:11:11:11:11:11 out |
Block Cambium AP Multicast packet going on air |
acl deny mac 13 any ff:ff:ff:ff:ff:ff out |
Block ARP packets going on air |
acl permit ip 14 any any any |
Allow all other IP packets in both the direction |