04-29-2015 12:30 PM - edited 07-05-2021 03:06 AM
Hi,
I would like to block communication between the clients connected on my guest SSID. But at the same time, would like to allow them to access one of the server in the same SSID. Is it possible to achieve it through P2P Forward-Upstream ? If so do i have to do anything at Layer2 switch and L3 gateway device ?
04-29-2015 01:11 PM
I would do the Upstream forward and then at L3 create an ACL.
In that ACL allow access to the server, deny access to any other IP on that subnet, deny access to all other subnets you have, then allow access any any so they can get to the internet without being blocked.
HTH,
Steve
04-30-2015 02:54 PM
I have ASA as my gateway. When i try to ping other host with Forward-Upstream, i am not getting any log in firewall. Does the host to host communication goes through default gateway or through the L2 switch ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide