I have a gateway router which connects to a Ruckus ICX switch (running the Router image), which in turn has two Ruckus Unleashed APs connected to it.
I would like to configure a wireless network which cannot access devices on my LAN, but which CAN be reached and managed by a device on my LAN. These would be untrusted IoT devices that run services which need to be accessible, but which do not need to initiate connections to other systems.
I'm thinking the Unleashed AP ACLs aren't granular enough for this type of configuration, and I'd instead need to configure a VLAN and implement a Firewall somewhere along the path.
Is there a way to achieve this configuration with the equipment that's already in place?
Thanks in advance!
