Guest NET traffic

[vishal.rane]

Hello

Guest network is required to be routed to DSL_Line, can someone guide me the steps.

Guest network should not communicate with other vlans, do i apply ACL on Guest or other subnets

vlan 2

name server

ip address 192.168.2.254 /24

vlan 3

name users

ip address 10.1.1.1/23

vlan 4

name guest_network

ip address 192.168.100.254/24

vlan 5

name firewall

ip address 10.200.200.1 /30

router ospf 1

network 192.168.2.0 0.0.0.255 area 0

network 10.1.1.0 0.0.0.255 area 0

network 10.200.200.0 0.0.0.3 area 0

ip route 0.0.0.0 0.0.0.0 10.255.255.2   (( default route to firewall ))

thanks in advance

Vishal

[Tod Larson]

Recommend using the feature called VRF-lite. Create a VRF called Guest and then put your guest vlan in the guest VRF. This will isolate your guests from the other traffic.

http://packetlife.net/blog/2009/apr/30/intro-vrf-lite/