IP redirection feature based on SSID

[charleskoh]

izzit possible to redirect those packets to a router so as to go out of the LAN to have internet access instead of to a host??

coz we want to set an SSID in our AP for our customer to use, and they are not suppose to see wats in our LAN, or whatever packets they send into our LAN segment because of security issues and anti virus purpose..

Therefore izzit possible to point those packets from these SSIDs to my router and goto the WAN, and then i will use access-lists on my switches to further prevent packets from such VLANS(SSIDs) into my server/lan segment..

Are there better ways in doing this?

[dominic.caron]

You will need to use some kind of proxy to use the redirection feature, more moving parts...bad.

A more simple solution would be to use access-list directly on the dot11radio0.VLAN interface of the Access-Point. You can secure your traffic at the edge this way and have a different ACL on each VLAN(SSID)