Hi,

I have a 3300V installed at a company, what they require is basic but the 3300 does not seem to be able to it,

They require 4 Port based VLans with a seperate DHCP address range allocated to each, Using the port based method I cant get the seperate DHCP server options so I have to use to use the tag based method which then shows the multiple DHCP options, however, using this method and having the packets ''untagged'' as it has to be because access is for ''public'' wireless devices seams to mean that all sepeate IP ranges/subnets can ''see'' each other.

I need each ip range/subnet on each one of the 4 ports NOT to be able to see the other.

The reason is that one range/port is for open internet access to the downstairs customers and I cant afford for them to see any of the other IP Ranges/Subnets which the business uses.

Is there a way around this?

Also, how do I specify an IP Range in the firewall rules.

Regards John Tankard