the_warrior

Yes ...Thats right

I have done the following ....and I tested my network ...its working properly... ===================================================== ip access-list extended WLAN deny ip any 10.75.116.128/26 deny ip any 10.75.3.128/28 deny ip any 10.75.9.128/28 deny ip any 10.75.112.0/23 deny ip any 10.75.114.0/23 deny ip any 10.75.4.128/28 deny ip any 10.75.6.128/28 deny ip any 10.75.5.128/28 deny ip any 10.75.7.128/28 deny ip any 10.75.8.128/28 deny ip any 10.75.120.0/24 deny ip any 10.75.116.0/25 deny ip any 10.75.117.128/26 deny ip any 10.75.121.128/28 deny ip any 10.75.118.192/27 permit ip any any = vlan 218 ip access-group WLAN in ========================================================= Then I changed my mind .....Instead of denying all then permitting any ...I issued the following commands, and I got the same result: ip access-list extended WLAN permit ip any 10.75.119.0/29 deny ip any any = vlan 218 ip access-group WLAN in ========= Thank you

Thanks ....I really appreciate your help

Thank you gshaw for the precious information and guidance ... I will do what you suggested and I will let you know the result...and I will discuss this issue with you ... Thank you again

I have the same issue ...same core switch ... I added a new VLAN for wireless network ...what I have are: 1-30 Procurve APs (wireless Vlan) 2-ISA Server 2006 and DHCP (ISA&DHCP VLAN) 3-Clients (students, Guests & Teachers Laptops VLAN) Previously the 1st and second vlan were one vlan then i separated them because of the ip conflict ... The problem with me is : The clients laptops can see the other vlans ...I have DHCP, DNS , ... Servers, computer labs, other departments VLANS ....and I dont want them to see these vlans... What I want is : I want the clients VLAN to access the internet from ISA server and to get the ip from the DHCP ...I have done that ...BUT I dont want them to see other VLANS ... What Shall I do ...I know its ACL ...but how do I configure it in 5406zl... Thank you