# Advanced Settings

## L2 isolation

L2 isolation is a feature to prevent wireless client from communicating with any other devices in the network except gateway. With this feature enabled, not only clients associating with the same SSID cannot communicate with each other (this is so called **client isolation** conventionally) but also clients cannot access other devices in the same LAN. Another exception is that wired devices added to VIP list are still accessible.

This feature is useful for guest SSID, enhancing security by limiting potential attacks and threats between clients on the wireless network.

{% hint style="info" %}
L2 isolation works with all types of [client IP addressing](client-ip-mode), i.e., NAT mode and Bridge mode.
{% endhint %}



## Band Steering

**Dual band operation with Band Steering** detects clients capable of dual band operation and steers them to another frequency which leaves the more crowded band available for communication. This helps improve the end-user experience by reducing channel utilization, especially in high-density environments. **Band Steering** is configured on a per-SSID basis.

#### RSSI Threshold

This value defines the minimum RSSI required for dual-band wireless clients to associate to 5G band. If the client's RSSI drops below this threshold, it is only allowed to connect to 2.4G band. The recommended value is -60\~-80.

## BCMC Suppression

BCMC suppression is a feature to drop all the broadcast and multicast frames on a VLAN except for ARP, DHCP, IPv6 router advertisement, and IPv6 neighbor solicitation.

Broadcast-Multicast traffic from APs, remote APs, or distributions terminating on the same VLAN floods all VLAN member ports. This causes critical bandwidth wastage, especially when the APs are connected to an L3 cloud where the available bandwidth is limited or expensive. Suppressing the VLAN broadcast-multicast traffic to prevent flooding can result in loss of client connectivity.

To effectively prevent flooding of broadcast-multicast traffic on all VLAN member ports, use BCMC Suppression to ensure controlled flooding of broadcast-multicast traffic without compromising the client connectivity. This option is for the controlled flooding of broadcast-multicast traffic and is enabled by default.

### Example Use Cases

* Enterprise network with over 1000 active wired or wireless clients in different VLANs.
* Campus network with over 1000 active wired or wireless clients in different VLANs.

