How to create SSID only LAN

[Tuan_Nguyen1]

Hi you

I used Controller RFS 4000. How to create SSID only LAN, not connect to internet.

Thank you

[ckelly]

What are you seeing that looks like a roaming issue?

[Aviv_Kedem]

Hello Chris,

Just created the rule:
permit ip x.x.x.x/24 x.x.x.x/24 rule-precedence 1
deny ip any any rule-precedence 100

and applied to IN wlan and filtering is working well, but I have something like roaming issues now.
DHCP server is inside the subnet, don't need DNS.

I need to allow something else?

Thanks

[ckelly]

In that case, you'll need to create an IP ACL with the appropriate rules and then apply the ACL to the WLAN's inbound firewall.
You'll need to allow things like DHCP server traffic, DNS, DGW, and whatever else might be needed, but then disallow all other traffic (which will prevent the user from accessing anything else on that LAN.

[Tuan_Nguyen1]

Hi you

If no default gateway, I pinged AP time out.

[ckelly]

Try supplying no default gateway or a non-existent default gateway in the DHCP lease?