08-20-2018 06:10 PM
Solved! Go to Solution.
08-20-2018 06:55 PM
Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.
08-20-2018 07:19 PM
Thanks for that picture, yes that will work, but you don't need the "To-Access" part, just the "From-Access".
08-20-2018 07:11 PM
Sorry, doesn't look like the picture loaded properly, could you try again? Or feel free to send it to me directly at communityhelp@aerohive.com.
08-20-2018 07:00 PM
08-20-2018 06:55 PM
Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.