Guest SSID with internet access only in SDA

[JustTakeTheFirstStep]

I want to use SGACL in SDA to make guest ssid only accessible to internet.

From what I understand, it seems like I need to set ACL on Fabric edge

guest ssid is included in fabric and I want to use psk

I want to know more details.

[balaji.bandi]

I am sure the WLC in Fabric mode check some example :

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/tech_notes/b_cisco-dna-center-sd-access-guest-automation.html

[Andrii Oliinyk]

not sure i understand your goal... dont you have guest in separate VN & dont implement p2p block to prevent guests from communicating each to other?

[JustTakeTheFirstStep]

delete