How do I create an SSID with only internet access on WM3600 with AP4610s

[CHRLX-ENG]

I need to create an SSID for our clients that will only allow internet traffic. I want to block all other traffic to our LAN. How can I accomplish this? Thanks in advance.

[dflouret]

Can you extend that vlan to the controller?

[dflouret]

CHRLX,

The easiest way is to create an SSID and assign it to a vlan that can only connect to internet. The DHCP server should give the wireless clients the address of the internet router as their default gateway.

[PARTHIBAN_CHINN]

Just create an ssid with security level for wireless.
You might need to do deny rule acl based on ip subnets.