I've been tasked to move our current Guest SSID off our current IP/Subnet to a new IP/Subnet and channel it to another Ethernet Port on our Filter/Firewall.

[rkowals]

Current Guest Network requires a passphrase to access the internet, but for new security measure, we want to move the Guest network off the 172.16.x.x address and onto a 192.168.x.x subnet. And channel it out to another ethernet port on our Content/Firewall. I read we can create the Firewall Rule for this new SSID, but should we also create a separate VLAN (Taged or Untagged). to channel the traffic and prevent it from accessing our subnet?

[rkowals]

As always, thanks again.

[samantha_lynn]

I would recommend creating another VLAN, which would need to be tagged as it isn't going to be your native VLAN. This also means you'll want to set up trunk ports on your switch to pass multiple VLANs.