guest network question

If possible, you will definitely want to masq your guest network with a public IP used only for it.

Also, if you're running the guest network through a Web Filtering Profile, you will want to use the new capability described in How to change the outgoing interface for Web Filtering.  Rather than use the suggested method of enabling this capability, do the following as root:

cc set http enable_out_interface 1

Cheers - Bob

If possible, you will definitely want to masq your guest network with a public IP used only for it.

Also, if you're running the guest network through a Web Filtering Profile, you will want to use the new capability described in How to change the outgoing interface for Web Filtering.  Rather than use the suggested method of enabling this capability, do the following as root:

cc set http enable_out_interface 1

Cheers - Bob

Awesome thanks!  Here are the main steps I did to hopefully achieve my goal of keeping the network separate with a different public ip in case they get on the black list.

1.  I created an additional address on the WAN bridge

2.  Created a web filter profile called guest wireless

3.  For Allow networks = Network Object of Guest Network Definition and  under Optional: Interface for outgoing traffic: select interface Network = additional address on WAN bridge in first step.

Masquerading Rule:  Guest_Wifi_VLAN->WAN Bridge + Guest Public IP

Then Firewall Rule