Technical Tip: How to configure intra-SSID privacy

Description

This article describes the steps to disable or enable intra-SSID privacy. Enabling intra-SSID privacy blocks communication between clients of the same access point.

This feature is disabled by default.

Scope

FortiGate.

Solution

Use the following CLI commands:

config wireless-controller vap
    edit <vap_name>
        set intra-vap-privacy {enable | disable}
    next
end

Here, <vap_name> is the name for this Virtual Access Point.

Note: Starting with FortiOS v8.0, the intra-vap-privacy setting is no longer available for local-bridging VAPs (set local-bridging enable).

In the GUI, go to SSIDs -> Block intra-SSID traffic (enable).