setting up visitors subnet

[IT Csar]

I need to establish corporate subnet for visitors. Requirements are such that ...

1) they won't be able to access main corp network
2) they will be able to access the internet
3) they won't be able to see other visitor on the subnet
4) if need, temp and limited access to corp network resources (license server) could be configured on individual basis.

Most of the tasks I can accomplish with current hardware and configuration. However, I am struggling with #3. I don't think VLAN is the answer, rather some traffic tunneling, where packets can only travel uplink and back, never across the switch ports to another users.

Thanks for your suggestions.

[cenk sasmaztin]

you can use source port filter

with source port filter commad deny or permit one or more port other port or ports between connection



for eample source port filter

dunyacore(config)# filter
source-port Specify source-port filter to manage.
dunyacore(config)# filter source-port
named-filter Set the filter name.
[ethernet] PORT-LIST Set the list of source port filters.
dunyacore(config)# filter source-port 1
drop Set a list of ports to which forwarding of filtered
packets is not permitted.
forward Set a list of ports to which forwarding of filtered
packets is permitted.
named-filter Set the filter name.

dunyacore(config)# filter source-port 1 drop
[ethernet] PORT-LIST Enter a list of ports or one port for the 'drop'
command/parameter.
dunyacore(config)# filter source-port 1 drop