Hi, Your best option would be to place a firewall in between the AP and the switch that handles the traffic filtering so you can blacklist sites. You can use ACLs to block ports and IP ranges, but that isn’t as effective and a web filter. Page 689 [URL] You also should turn on BPDU guard.
Hello guys, I have a little problem here that how to create an external subnet be able to connect to the Internet without access directly to the main/core network (servers or files), and that subnet is used for other externals devices which not authorized yet (The customers' smartphones or some devices be able to connect to the Internet via Wireless) It looks like this image below:[IMAGE] Those devices on the right image are external devices that want to connect to the Internet and not permitted to be able to access the inside network such as VLAN14 or VLAN15. It sounds like a simple thing but when those devices that be infected by a virus or some dangerous things (DDoS etc.), it seems able to infect to the network inside that I don't want it to happen. And I'd like to prevent it before it is able to occur. How things I should do the setting on the L3 Switch (in fact that is an N3024 device) or the AP, Please give me some advice! By the way, this problem that I'd like to resolve is the same as the public wifi system that enforces the user must be authorized (email or phone number) before access to the Internet as I thought but how to do that is not an easy issue for some guys who not much experiences in Networking like me. Therefore, I'm highly appreciated to get any help from you. Thank you for your consideration, Dai
How to build a public wifi system via L3 Switch