Hi Oscar,
This can definitely be done within the AP. To do this you will need to create some firewall rules within the AP settings on the Guest role. This can be done in the Access tab when setting up the Network:
The rules you need will be unique to your scenario, but they may look something like this. Access to the network range 10.0.0.0/8 is denied but everything else is allowed. The order of the access rules are the order in which they are applied.
A couple of other settings may be useful also for the Guest network to ensure they can't find a way through. On the Basic tab under Advanced Settings you will find 'Deny inter user bridging' and 'Deny intra VLAN traffic'. Enabling these would probably be a good idea for the Guest network to reduce the chance of traffic going somewhere you did not intend.
Original Message:
Sent: Jun 09, 2022 03:55 AM
From: Hieu To Xuan
Subject: Guest Network only connect to internet
Hi ariyap,
I config as your guide and user guide. The Guest network can connect internet. It's also access another vlan.
I would like to setting only access internet and deny other vlan. Can i do it with IAP-315(RW)?
Original Message:
Sent: Jun 09, 2022 02:36 AM
From: Ariya Parsamanesh
Subject: Guest Network only connect to internet
yes you can do that, you can create a new SSID and select Guest as its primary usage, then you have the option of putting the guest clients on its own VLAN or use "Virtual Controller managed" option which source NAT the traffic.
here is the user guide
https://www.arubanetworks.com/techdocs/Instant_88_WebHelp/Content/instant-ug/captive-portal/conf-wlan-guest.htm
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
Original Message:
Sent: Jun 09, 2022 12:52 AM
From: Hieu To Xuan
Subject: Guest Network only connect to internet
Hi,
I have IAP-315 (RW), no Wireless Controller device.
Can I config Guest network only connect to internet on AP?
Thank you.