cancel
Showing results for 
Search instead for 
Did you mean: 

Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks !

Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks !

michael_antes
New Contributor
Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks !
1 ACCEPTED SOLUTION

samantha_lynn
Esteemed Contributor III

Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.

View solution in original post

4 REPLIES 4

samantha_lynn
Esteemed Contributor III

Thanks for that picture, yes that will work, but you don't need the "To-Access" part, just the "From-Access".

samantha_lynn
Esteemed Contributor III

Sorry, doesn't look like the picture loaded properly, could you try again? Or feel free to send it to me directly at communityhelp@aerohive.com.

michael_antes
New Contributor
Thanks for the quick reply. I’ve found the setting in question. Would the following setup just allow internet access and not allow access to local subnet?
[cid:image001.png@01D4387D.6317AB30]

Thanks again!

MICHAEL ANTES
3243 S. La Cienega Blvd, Suite A
Los Angeles, CA 90016
T: 424-452-1577
C: 626-258-9452
Michael.Antes@decor-usa.net

DÉCOR
WWW.DECORAPPAREL.COM <>

samantha_lynn
Esteemed Contributor III

Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.

GTM-P2G8KFN