Create a Vlan just purely access internet

[dkhan]

Hello everyone,

I am trying to create a VLAN which solely purpose is to access internet. I shouldn’t allow to access other vlans on the same network.

my DHCP sever is on Windows sever 2012 

So I got most of the config figure out please let me if I am wrong or right here or if I am missing something. 
switch IP 10.39.0.35

firewall 10.39.0.31

DHCP : 10.39.0.35

selected dhcp scope 10.39.25.0

switch config

vlan 35

name Vlan isolated internet access

int 1/0/28

switch port mode access 

switch port access Vlan 35

no shut

ON firewall ASA 

Int fa0/1.25

encapsulation dot1q.25

ip address 10.39.0.1 255.255.255.0

ip helper address 10.39.0.35

no shut 

question is do I need to use IP ADDRESS command on Vlan aswell or just on ASA FW  interface like the way I did up in my config or do I need to assign two different IP ADDRESS in both Vlan and ASA FW ? 

and ofcourse doing any of this first create the scope on dhcp sever for .25 network.

am I doing this right? 

[Georg Pauwen]

Hello,

if the ASA does the routing, an IP address there is sufficient. How do you block access from other Vlans ?

[dkhan]

With the different network address scheme i.e 10.39.25.0 I am guessing. Or that won’t going to work ??

also that actually confusing me . How will firewall will know how to provide any device connected to Vlan 35 designated ports with the correct IP address scheme.