Interface Access

[TristanGude]

Hi,

After

ip access-list extended Guest
deny ip 172.17.67.0 0.0.0.255 any
permit ip any any
!

interface GigabitEthernet1/0/20
description MS-Printers
switchport access vlan 136
switchport mode access
ip access-group Guest in
ip access-group Guest out
!
I can ping the Printer connected to the Interface while connected to the WIFI on 172.17.67. What am I doing wrong?

[luis_cordova]

Hi @TristanGude 

To discard.
Is your Wifi device performing NAT?

Is your Wifi device on the same vlan as the printer(136)?
Could you share a little more information about your network?

Regards