WLC P2P Forward-Upstream implementation

[uthayaman elangovan]

Hi,

I would like to block communication between the clients connected on my guest SSID. But at the same time, would like to allow them to access one of the server in the same SSID. Is it possible to achieve it through P2P Forward-Upstream ? If so do i have to do anything at Layer2 switch and L3 gateway device ?

[Stephen Rodriguez]

I would do the Upstream forward and then at L3 create an ACL.

In that ACL allow access to the server, deny access to any other IP on that subnet, deny access to all other subnets you have, then allow access any any so they can get to the internet without being blocked.

HTH,
Steve

[uthayaman elangovan]

I have ASA as my gateway. When i try to ping other host with Forward-Upstream, i am not getting any log in firewall. Does the host to host communication goes through default gateway or through the L2 switch ?