Wireless client isolation is a layer 2 function on the access point itself.