How is it best to limit access the data ports in the company lobby for Internet access only? Even though the guests' are not on the domain, is it safe to allow them access to the data port?
I would suggest setting up a seperate vlan for these ports and usig dot1q to trunk this vlan to a dedicated DMZ interface or subinterface on your firewall with an ACL that only allows access to the internet. That should do the trick.
I would suggest setting up a seperate vlan for these ports and usig dot1q to trunk this vlan to a dedicated DMZ interface or subinterface on your firewall with an ACL that only allows access to the internet. That should do the trick.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
