Technical Note: How to configure intra-SSID privacy

[mibekwe]

Description

This article describes the steps to disable or enable intra-SSID privacy. Enabling intra-SSID privacy blocks communication between clients of the same access point.

This feature is disabled by default.

Scope

FortiGate.

Solution

Use the following CLI commands:

config wireless-controller vap
    edit <vap_name>
        set intra-vap-privacy {enable | disable}
    next
end

where <vap_name> is the name for this Virtual Access Point.

In the GUI :

SSIDs  -> Block intra-SSID traffic (enable)