Sounds great - My wireless vlans authenticate great - but I cannot ping the internet .20.x cannot ping the internet, but can ping the internal wireless lan gateway 10.1 - what gives? Also I noticed I didnt setup a BVI for .20 like you did (in your sh ip nt brie output) Should i have to create a seperate bridge group to get my vlan 20 to route ip outside? my access-lists are permit any any basically....help please