I've set up GuestWifi and activation and it works very nicely. I want to restrict users from other subnets so I configured Restricted Subnet Access, however, I can still get to anything on these subnets...ping, file shares, web portals, etc. Not sure what else I'm doing wrong?126.96.36.199 build 52
You cannot block a subnet and allow some part of it.
deny 172.16.0.0/12 means all packets with destination IP from 172.16.0.0 to 172.31.255.255 will be denied.And then you write: allow 172.17.10.3/32
If an ACL has so kind of mistakes it cannot be activated.