I have a pc in my trust that is not a trust pc. Therefore I want the user to be able to access the internet, get the IP address from DHCP and be able to resolve the hostname in DNS. But I don’t want the pc to have access to anything else on our network. I am thinking of creating a separate vlan and assign the specific ports on a switch to this vlan. But I don’t want this vlan to be able to communicate with any other vlans on the same switch or allow access to anything else in our network.
I am looking for suggestions on how I could configure the access control list and vlan itself. We have foundry switches as cores and 4400 3com switches within individual departments within our trust. Any help or suggestions would be much appreciated.
