https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68746#M4082 Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks ! Tue, 21 Aug 2018 01:10:55 GMT michael_antes 2018-08-21T01:10:55Z https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68746#M4082 Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks ! Tue, 21 Aug 2018 01:10:55 GMT https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68746#M4082 michael_antes 2018-08-21T01:10:55Z https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68747#M4083 <P>Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu. </P> Tue, 21 Aug 2018 01:55:53 GMT https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68747#M4083 samantha_lynn 2018-08-21T01:55:53Z https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68748#M4084 Thanks for the quick reply. I’ve found the setting in question. Would the following setup just allow internet access and not allow access to local subnet?<BR /> [cid:image001.png@01D4387D.6317AB30]<BR /> <BR /> Thanks again!<BR /> <BR /> MICHAEL ANTES<BR /> 3243 S. La Cienega Blvd, Suite A<BR /> Los Angeles, CA 90016<BR /> T: 424-452-1577<BR /> C: 626-258-9452<BR /> Michael.Antes@decor-usa.net<MICHAEL.ANTES><BR /> <BR /> DÉCOR<BR /> WWW.DECORAPPAREL.COM <></></MICHAEL.ANTES> Tue, 21 Aug 2018 02:00:34 GMT https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68748#M4084 michael_antes 2018-08-21T02:00:34Z https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68749#M4085 <P>Sorry, doesn't look like the picture loaded properly, could you try again? Or feel free to send it to me directly at communityhelp@aerohive.com. </P> Tue, 21 Aug 2018 02:11:26 GMT https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68749#M4085 samantha_lynn 2018-08-21T02:11:26Z https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68750#M4086 <P>Thanks for that picture, yes that will work, but you don't need the "To-Access" part, just the "From-Access". </P> Tue, 21 Aug 2018 02:19:38 GMT https://community.extremenetworks.com/t5/aerohive-migrated-content/is-it-possible-to-restrict-access-to-a-subnet-basically-we-don-t/m-p/68750#M4086 samantha_lynn 2018-08-21T02:19:38Z