Is it possible to keep guest users from accessing the LAN without PEF? I have captive portal in effect utilizing it's own VLAN, DHCP and outside DNS and that all works perfectly. However, I am still able to ping internally and connect internally by IP address. Without PEF I am unable to create rules so I'm wondering if there is any other way of securing the LAN from guest users?
We are using a 650 with ap-105's.