wireshark wireless isolation

Wireless isolation typically stops two computers on the wireless network from seeing each other, but still allows the wireless clients to access the wired network. This is done within the AP or wireless router, similar to a firewall rule. NOTE I said similar to a firewall rule.

The process works something like this:

1. Packet is received by AP over the wireless interface
2. Bridging subsystem examines packet for destination MAC
3. If destination MAC exists on wireless interface, then drop
4. Otherwise forward the packet via wired interface

Since all wireless clients have to connect to the AP for communication, the AP's switching table is aware of all the client's MAC address. Therefore the logic of whether to drop a frame exists within the AP.

The AP/wireless router does not advertise this "feature" in any WiFi frames (such as Beacons). However, you can try to ping another wireless client. Just make sure that all firewalls are disabled on both clients. Windows likes to block ping requests.