Restrict intervlan communication

[leadtheway]

so Have  few vlans that for the most part standalone.  i have 2 vlans created that we use for wireless...one for employee and one for guest, employee is allowed to talk to local lan, while guest is prohibited. But whats odd is if i put a pc and plug into an MS switchport on that guest vlan it can talk to any vlan.  I assume this has to do with the wireless marshalling is being done based on SSID and not Vlan, so There probably needs something to restrict it on the MX/MS

[NolanHerring]

If you are denying local lan access on the wireless firewall settings, it will block. However you are correct, for devices plugged in hardwire on that VLAN, you would want to edit the MX firewall settings to block inter-vlan communication.

For example:

You could also do some ACL on the switch side if you have SVI's on your core switch etc.