[russdill]

It looks like both clients must be on the same VLAN for the attack to work. They could be connected on different BSSIDs or even different SSIDs, but they still must be on the same VLAN.

[cluckindan]

If the vulnerability is between layers 1 and 2, wouldn’t that imply that VLAN tagging at layer 2 might not be effective in segregating the traffic?

[cyberax]

Wireless cards typically don't expose the VLAN tags directly. So VLANs should be OK.