I have created an additional VLAN in DHCP. I have copied the running-config from our ASA5500 and duplicated existing VLAN configuration entries, modifying them to match the new VLAN. I want to permit internet and email traffic on the VLAN, but otherwise isolate it from our network. I’ll try adding the new VLAN to the VLAN database. However, in regards to isolating the subnet, I am sort of a novice and want to know what syntax and protocols I would use to deny traffic from this subnet.
Ultimately, we want to put a simple (home office) wireless router on this subnet and allow employees to get their work email and access the internet on their personal phones without compromising the rest of the network. The president wants to do this so that people will not use up their data plan. We also have a web filter appliance in place. Perhaps I can also use some of the features in the wireless router to further protect us.