Frank99

Hi Adam, that's brilliant thank you for that example it look as though it will do exactly what I am trying to achieve. I will try it out and let you know how I get on.

Thank you for the replies. I am afraid that I am stuck with having to use the switch. I was thinking of using the ISP's DNS server and the DHCP server that is built into the wireless controller. I did wonder if I would need to set up some ACLs to lock down access to other subnets. I have never done anything with ACLs before, so I will read up about them and see what I can do. If anyone has any examples of ACLs that they would like to share, then it would be really appreciated.

We are trying to setup a guest Wireless profile. We want toensure that devices on the guest network can only access the internet. We haveset up a separate VLAN (VLAN 50) for the guest profile. Our guest devices cannow access the internet through VLAN 50. However our core switch (HP 5308xl) isset to route IP traffic to all VLANs. This means that our guest devices can seeother devices on the default VLAN and therefore not achieving what we want.Does anyone know what I need to do on the layer 3 switch. Listed below is partof the config for our core switch. Our Cisco router is plugged into port A1. ip routing snmp-server community "public" Unrestricted snmp-server host 10.56.84.45 "public" vlan 1 name"DEFAULT_VLAN" untaggedA1-A4,B1-B4,C2-C4,D1-D4,E1-E4,F1-F4,G1-G4 ip address10.56.84.1 255.255.252.0 ip address10.53.160.30 255.255.252.0 ip address10.58.226.1 255.255.255.0 ip helper-address10.56.84.15 ip igmp exit vlan 50 name"Open" ip address10.58.227.1 255.255.255.0 tagged D3,E2 exit ip route 0.0.0.0 0.0.0.0 10.53.160.25 spanning-tree exit password manager password operator