How to configure Guest to have internet access only?

ericohermoso · ‎06-09-2010

Hello ,

I am just confused about the guest access. Should I make separate vlan for the guest access? How can the guest, access only the internet site?

thank you

Faisal Sehbai · ‎06-09-2010

Hi,

If you place them in a separate VLAN, then block your internal subnets and allow for all. This will give them access to everything except your internal net.

If OOB, then you'll have to block on your FW, or whatever the layer 3 SVI or DGW for the guest subnet/vlan is.

HTH,

Faisal

ericohermoso · ‎06-10-2010

Thanks, My setup is L3OOB and

I am still figuring out on how to configure

it. Do you have a sample config so i can study and apply?

thanks and best regards

ericohermoso · ‎06-11-2010

Hi Do you mean here

, I will configure access-list in my L3 switches and apply to my SVI?

Faisal Sehbai · ‎06-11-2010

Hi,

Post your network diagram with the vlans/subnets marked.

Faisal