Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks !

[michael_antes]

Is it possible to restrict access to a subnet? Basically we don't want guests who connect to our guest wifi network be a be able to connect to our servers on subnet 10.118.244.x. Thanks !

[samantha_lynn]

Thanks for that picture, yes that will work, but you don't need the "To-Access" part, just the "From-Access".

[samantha_lynn]

Sorry, doesn't look like the picture loaded properly, could you try again? Or feel free to send it to me directly at communityhelp@aerohive.com.

[michael_antes]

Thanks for the quick reply. I’ve found the setting in question. Would the following setup just allow internet access and not allow access to local subnet?
[cid:image001.png@01D4387D.6317AB30]

Thanks again!

MICHAEL ANTES
3243 S. La Cienega Blvd, Suite A
Los Angeles, CA 90016
T: 424-452-1577
C: 626-258-9452
Michael.Antes@decor-usa.net

DÉCOR
WWW.DECORAPPAREL.COM <>

[samantha_lynn · Accepted solution]

Yes, there is a pre-built IP firewall object called "Guest-Internet-Access-Only" that does this for you, it blocks all internal IP scopes but allows DHCP, DNS, and internet access. If you open the SSID in question, edit the user profile applied to the SSID, and enable IP Firewall rules you should see this pre-built firewall object in the existing objects menu.