[c-nsp] extending PVLAN to wireless?

[Bradley Urberg Carlson]

I have used Private VLAN features to reduce virus activity in 
convention centers, etc.  I'd like to add open wireless access to some 
of these areas.  Is anyone familiar with an access point which supports 
PVLAN-like end-node isolation, or "secure-ARP", or some other method 
which might either prevent traffic between end-nodes, or else force 
that traffic through a stateful-inspection firewall?  Forcing users to 
use a VPN client is not an option, as the hotspot needs to appear open. 
  Cost is a factor, so something simple like a "PVLAN hotspot" AP would 
be preferable.

Bradley