How is it best to limit access the data ports in the company lobby for Internet access only? Even though the guests' are not on the domain, is it safe to allow them access to the data port?
I would suggest setting up a seperate vlan for these ports and usig dot1q to trunk this vlan to a dedicated DMZ interface or subinterface on your firewall with an ACL that only allows access to the internet. That should do the trick.
I would suggest setting up a seperate vlan for these ports and usig dot1q to trunk this vlan to a dedicated DMZ interface or subinterface on your firewall with an ACL that only allows access to the internet. That should do the trick.
