in the lobby of your building are three rj45 ports connected to the switch. you want to allow visitors to plug into these ports to gain internet access, but they should not have access to any other devices on your private network. employees connected throughout the rest of your building should have both private and internet access.