Question

A small business wants visitors to have internet access from a wireless network without being able to reach the company's internal servers, printers, or workstations. All devices connect through the same managed switch and a single access point that supports multiple SSIDs. Which configuration BEST achieves this isolation?

Accepted Answer

Assign the guest SSID to a separate VLAN that is routed only to the internet and blocked from the internal VLAN

Answer

Enable WPA3 encryption on the guest SSID and leave both networks on the same subnet

Answer

Configure the guest devices with static IP addresses outside the DHCP scope

Answer

Set up port forwarding on the router for the guest access point