Guest VLAN config on 4006

[rephil]

I have a 4006 switch with a WS-X4232-L3 router module.

I want to set up a guest VLAN for wireless users. I only want them to have access to our dhcp server, dns server and inside firewall interface.

I tried using acl on port channel but is said it is not supported. How would i accomplish this?

Thanks,

philip

[Prashanth Krishnappa]

If you want to use ACLs on your WS-X4232-L3 module, you will need to use gigabit sub-interfaces rather than port channel interfaces

http://www.cisco.com/warp/public/473/181.html

[rephil]

What is the diff between using port channel interfaces and gigabit sub-interfaces? Would I have to change my config from port channel to gigabit sub-interfaces?

[Prashanth Krishnappa]

Correct. RSM in a CAT4k can be configured in one of the 2 ways

1)Configuring the two backplane ports on the Sup and RSM into an etherchannel and then configure sub-interfaces to do inter VLAN routing

2)To keep the two backplane ports separate and trunk over them using gigabitethernet sub-interfaces

If you need ACLs you will need to use option 2

[rephil]

Thanks for the help.