Block Network only for Guest Wi-Fi user

Block Guest Wi-Fi user to access the Internal LAN Network and Other site WAN and DMZ Network. Only Internet allowed for Guest Wi-Fi User Via Proxy



interface Vlan43

description **WiFi_Guest Vlan **

ip address 172.29.43.X 255.255.255.0

ip access-group GUEST_BLOCK_NET in





ip access-list extended GUEST_BLOCK_NET

permit ip 172.29.43.0 0.0.0.255 172.29.43.0 0.0.0.255

permit ip any host 10.100.100.254 // Internet Proxy IP //

permit ip any host 172.29.60.1 // Wi_Fi Controler IP //

deny ip 172.29.43.0 0.0.0.255 172.16.0.0 0.15.255.255 // Deny Other Local Vlan networks //

deny ip 172.29.43.0 0.0.0.255 10.100.100.254 0.0.0.255 // Deny Other WAN and DMZ networks //

deny ip 172.29.43.0 0.0.0.255 192.168.100.0 0.0.0.255 // Deny Other Remote Location networks //

permit ip any any