I want to set up a vlan only for the wifi APs and wifi clients on my network. They can't access to any server, only internet acces
I already implement this configuration and its working, but now I want to allowed a couple of laptops to connect to servers in other vlan. what should I do?
Should I do it using Mac address of laptops or IP? how?
thanks a lot.
It sounds to me like you;
- know what you want to do with the switch,
- have DHCP services in place and it's working
- You understand how to filter (permit or deny) traffic with ACLs. These ACL will deny traffic from or to wireless clients even before the ethernet frames leaves my switch
You still can have VLAN 3 on the switch terminating on the firewall, there maybe no
need to add a IP interface to VLAN 3 on the switch.
If all is working, we are finished. But if you have further questions , more than happy to assist with advice or a configuration example.