I have this config but kids with Kali can enter in the Aironet and access admin network. What im doing wrong? Is any way of resolve issue withou more hardware?
Router#sh run
Building configuration...
ip dhcp excluded-address 192.168.2.1 192.168.2.2
!
ip dhcp pool STU
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 198.153.192.50 198.153.194.50
lease 0 2
!
!
ip dhcp pool ADMIN
network 192.168.8.0 255.255.255.0
default-router 192.168.8.1
dns-server 8.8.8.8 1.1.1.1
!
!
interface FastEthernet0
description CONNECTED TO WAN
switchport access vlan 100
no ip address
spanning-tree portfast
service-policy output p2p-drop
!
interface FastEthernet1
switchport access vlan 200
no ip address
spanning-tree portfast
!
interface FastEthernet2
switchport access vlan 300
no ip address
spanning-tree portfast
!
interface FastEthernet3
switchport trunk native vlan 100
switchport mode trunk
no ip address
!
!
interface Vlan100
description WAN
ip address 192.168.1.1 255.255.255.0
ip nat outside
ip virtual-reassembly in
!
interface Vlan200
description LAN
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
service-policy output p2p-drop
!
interface Vlan300
description LAN_ADMIN
ip address 192.168.8.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
ip default-gateway 192.168.1.254
!
ip nat inside source list 100 interface Vlan100 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.254
!
!
access-list 100 permit ip 192.168.2.0 0.0.0.255 any
access-list 100 permit ip 192.168.8.0 0.0.0.255 any
!
!
end
Router#
