S@O 225 F/W 8.042x
I need to give customers and vendors wireless access to the Internet. I'd like to keep them isolated from the corporate lan.

I created a 3rd local subnet as a port based vLan to connect a wireless AP to.
As soon as I assign the new subnet to LAN port 3, all outgoing connections on my other 2 subnets are blocked.
The log shows Spoofed IP adress, rule -4, and the new wlan as the network. The Nat-Src is my Wan IP.
I have a rule allowing wlan to Internet. Which I didn't need when I created the 2nd subnet years ago.

I have NAT enabled on all subnets. DHCP in only enabled on the new wlan. Office Mode is off.

What am I missing?

TIA,
Jeff