@Kalagan 

It will need to check all ACL settings and VLAN settings...

But a simple solution is just to enable guest network on the EAP, so it can block access to your main network but allow Internet access.

  @Kalagan 

It will need to check all ACL settings and VLAN settings...

But a simple solution is just to enable guest network on the EAP, so it can block access to your main network but allow Internet access.

Hi thank for your answer.

Actually, it is a little bit more complicated than that. We're using a device called NovoConnect to allow people to broadcast their screen during meetings or participe in visio conferences.

This device is wired to the network (with a cable) in the employee VLAN and is also connected to the EAP on the guest network.

it seems that if we enable "guest network" on the EAP, you can't even ping/join devices on the same subnet. Only the internet access is working. So guest won't be allow to use the NovoConnect to broadcast their screen.

  @Kalagan 

We had a similar issue at our office with wanting guests to be able to cast their screens to conference room TVs but keep them off the main LAN. The best solution for us was to use casting hardware that doesn't connect to a network, but uses it's own Bluetooth-like signal to connect wirelessly. Microsoft Display Adapter and Apple TVs did the trick for us.