This is what I am trying to achieve. I would like the Guest Vlan to get access only to the internet. Everything else is banned. Here is what i have so far: interface FastEthernet0/0 description To_Internet ip address 1.1.1.1 255.255.255.252 ip access-group 102 in ip nat outside ip inspect RED out ip virtual-reassembly in duplex … Continue reading Cisco Wireless: How to configure a named access list to deny traffic from a Visitor Vlan to Internal Resources →