Secure Client Internet Access

[dkopischke]

I am implementing wireless access clients and coleagues. I don't want the clients to be on the same subnet as the employees. I have a cisco pix 506e firewall protecting our employees. The pix connnects to a DSL router. What would be the best way to put the guest users on thier own subnet? Thanks

[felixjai]

Configure vlan interfaces on your PIX. The new vlan interface can have secuirty50 and a seperate subnet. But it does require you to have a layer2 switch that support vlans.