Is this possible? 5412zl to handle internal and external wireless access to MSM422

[dsm091]

We have a configured a 5412zl switch to handle the VLAN for an MSM422 AP. 

Right now I have a VLAN set to port g23-g24.  One port is connected to the optional port on the firewall to access the internet.  The other port is connected to the MSM422. The public WIFI is available to the public and never touches our network. 

With this vlan created there is no possible way for the external(wireless) users to connect to our internal domain.  Which is by design.  Working perfect. 

I have now got a request for internal (domain users) to have access to internal resources like email and mapped drives via the wireless.

Is it possible to make a vlan and seperate G23-24 to Internet only and say another port for internal domain access?  The new vlan capabilities on these procurves is beyond my ability.  Maybe by creating IP addresses?  Then blocking the internal capabilities to a range of IPs via the firewall. 

I could easily buy another MSM422 and connect it to the 5412 but I wanted to check first before we spend another $800 on an AP.    Thanks in advance!

[ManiSundaram]

As I know   MSM422 can't support muliple VLANs without Access Controller Like MSM760.

[Gerhard Roets]

Hi dsm091

It is possible but you need to look at some security impacts. I would strongly suggest you look at the implementation and configuration guide found at the following URL

I would suggest you look at the hospitality option.

HTH