SRX5308 How to isolate some clients so they have internet only and can't contact peers

GDRitter,

If you just wanted the wireless connections downstairs dedicated only for guests, access and follow the steps on the article below:

How do I set up one or more VLANs between a NETGEAR ProSAFE firewall and a smart switch? 

Note: From the article, the SRX5308 and M4100-12G switch are used.  You already have an SRX5308 and you can use your existing GS748T on this setup.  Also from the article above, VLAN 1 and VLAN 5 are used an an example.  I suggest that you follow all the steps indicated on the article so that we will be in the same pace.  The goal here is to have both VLAN 1 (Private) and VLAN 5 (Guest) to have internet access but no access to each VLAN.  

Answer the questions below:

a. Are you able to access the internet when you connect PC1 to port 6 of the GS748T?  If you follow the article, port 6 is on VLAN 1 or Private VLAN.

b. Are you able to access the internet when you connect PC2 to port 11 of the GS748T? If you follow the article, port 11 is the only port on VLAN 5 or Guest VLAN.

c. From PC1, are you able to get replies when you ping the IP address of PC2? 

d. From PC2, are you able to get replies when you ping the IP address of PC1? 

Note: If your answers above are: (a)Yes, (b)Yes, (c)No, and (d)No, it means that you have really followed the steps from the article.  Proceed to the next phase below.

Remember that port 11 is the only port on VLAN 5 (Guest VLAN) which is untagged (U) and the rest of the ports of the GS748T belong to VLAN 1 (Private VLAN).  Here are the steps below:

1. Set a static IP address to WNDR3400 (configured as an access point) that is within the IP range of VLAN 5.

2. Connect the WNDR3400 to port 5 of the GS748T. 

3. Connect to the SSID configured on the WNDR3400 and check if you are able to go online wirelessly.

Note: Be reminded that only the Guest VLAN will be able to go online wirelessly.  

Let us know the result.

Regards,

DaneA

NETGEAR Community Team