ā08-20-2018 06:10 PM
Solved! Go to Solution.
ā08-20-2018 06:55 PM
Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.
ā08-20-2018 07:19 PM
Thanks for that picture, yes that will work, but you don't need the "To-Access" part, just the "From-Access".
ā08-20-2018 07:11 PM
Sorry, doesn't look like the picture loaded properly, could you try again? Or feel free to send it to me directly at communityhelp@aerohive.com.
ā08-20-2018 07:00 PM
ā08-20-2018 06:55 PM
Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.