a) Create a guest SSID and set the forward mode as NAT.|
The IP address of default address pool is 192.168.23.0/24
You can click NAT Address Pool Configuration to change the NAT Address Pool :
After changing the configuration, you need to click Save.
b) Set ACL to block guest users accessing to the intranet resource on CLi of Ruijie AP.
The ACL configuration example:
Guest vlan: vlan 233 192.168.7.0/24
Intranet resource vlan: vlan 6, 192.168.6.0/24
Ruijie(config)#ip access-list extended 107
Ruijie(config-ext-nacl)#10 deny ip 192.168.7.0 0.0.0.255 192.168.6.0 0.0.0.255
Ruijie(config-ext-nacl)#20 permit ip any any
Ruijie(config)#interface BVI 233
Ruijie(config-if-BVI 10)#ip access-group 107 in
c) Validation results
Share this topic to
©2000-2023 Ruijie Networks Co,Ltd