Hi,

I am configuring my router a 2860. I want to have two separate VLANS that both have access to the internet but no access to each other, I've done this it was easy following the manual.

I also want to have another VLAN that the router provides IP addresses to via its DHCP server but i don't want this VLAN to be able to connect to the internet, so it is an internal network only, does anyone know an easy way to achieve this?

Thanks,
Matt.

Well, it depends how foolproof you want it. Giving a false default gateway would stop it but for a more robust solution, create the VLAN in its own subnet and then set a firewall rule to block
access to everything from that subnet.