Setting up Private VLAN with only Internet Access

Posted on 2014-08-28
Last Modified: 2014-08-28
I would like to setup a private VLAN on our network that will only have Internet access.  This would mainly be used via wireless.  Currently we have a Cisco ASA 5505 as our firewall, several Cisco 2960 switches and a Cisco 4402 Wireless Controller.

I am familiar with setting up VLANs both on the switches and wireless controller.  But what I can't figure out is how to make that VLAN have no access to any other VLAN but still have internet access.  I am thinking ACLs, but not sure where to start, I've not really every played with them.

Thanks in Advance!
Question by:Railroad
    LVL 50

    Accepted Solution

    Probably the easiest would be to use an ACL on the 5505.  Just create an ACL that denies traffic to the local networks and a "permit any" at the end.

    Author Closing Comment

    I make the ACL on our core 3560 switch by creating the ACL:

    ip access-list extended Guest
     deny   ip any
     permit ip any any

    and applying it to the VLAN interface:

    interface Vlan51
     description Wireless Network
     ip address
     ip access-group Guest in

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (, affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
    This subject  of securing wireless devices conjures up visions of your PC or mobile phone connecting to the Internet through some hotspot at Starbucks. But it is so much more than that. Let’s look at the facts: devices#sthash.eoFY7dic.
    This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now