Wireless Broadcasts and Dynamic Vlans

RouterOS Wireless Networking
1

Hi,

We use radius to place wireless users in VLANs.
Question is: How is broadcast isolation maintained, when there are many different vlans in use on a particular BSSID?
Does MT use GTK for encrypting broadcasts?

We use “multicast-helper = full”, so multicasts are converted to unicast and delivered using the TK, the question is purely about broadcasts.

A related question, if an AP only has connected clients belonging to VLAN 10, will the AP still use air time on broadcasts arriving on the wire from other VLANs?

2

Multicast-helper also works for broadcast packets (even though name of property doesn’t mention it). As I understand it, when multicast helper is enabled, broadcast/multicast frames get sent only unicast to each AP client and are not also broadcasted.

3

Hi,

It appears you are correct. Packet capture shows e.g. arp arriving at the AP as broadcasts but at the client as unicasts.

Thank you.