topic Re: Creating Multiple Vlan on Cisco 2504 Controller in Wireless

Creating Multiple Vlan on Cisco 2504 Controller

okoroji80 — Mon, 05 Jul 2021 15:01:37 GMT

Dear Community Members.,

I have a requirement to setup multiple vlans and SSID on Cisco 2504 Controller as follows:

Vlan 10--- Staff

SSID---Staff

Vlan 20---- Management Staff

SSID--MGT

Vlan 30---- Guest/vendors

SSID---GUEST

For security reasons the Guest SSID is expected to go to the internet without being able to reach any of the server inside the internal network. whilst the MGT and Staff SSID can also visit the internet as well as the internal servers on the LAN.

how best can i archive this segmentation.

thanks

Re: Creating Multiple Vlan on Cisco 2504 Controller

Scott Fella — Mon, 25 Dec 2017 13:55:39 GMT

I don’t know your experience with Cisco wireless but here is the simple way.
You trunk the vlans to your network, create an acl for your guest vlan on the L3 Interface to block traffic to internal subnet. That is pretty much it.
As far as the controller goes. Here is a doc to reference. You can find more by searching:
WLC multiple SSID
WLC multiple VLANs
https://www.cisco.com/c/en/us/td/docs/wireless/access_point/1300/12-3_7_JA/configuration/guide/brsc1237/b37ssid.pdf

Re: Creating Multiple Vlan on Cisco 2504 Controller

okoroji80 — Mon, 25 Dec 2017 14:08:35 GMT

The document is focusing on Autonomous AP instead of the controller.

Re: Creating Multiple Vlan on Cisco 2504 Controller

Scott Fella — Mon, 25 Dec 2017 14:13:39 GMT

Search google for the following:
Cisco WLC multiple SSID
Cisco WLC multiple vlans
Cisco WLC multiple dynamic interface
Cisco WLC 2504 getting started

You can also search the forum for answers. There are documents and videos on how to do this.

Re: Creating Multiple Vlan on Cisco 2504 Controller

Scott Fella — Mon, 25 Dec 2017 14:17:47 GMT

Here is one to look at
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html

Re: Creating Multiple Vlan on Cisco 2504 Controller

NelsonGuedes — Thu, 28 Dec 2017 16:34:21 GMT

Hello,

You have two solutions:

1 - You can create a L3 VLAN Guest, on your switch and pass on the trunk to the WLC.

Dont forget to pass this vlan in the AP´s switch ports.

2 - You can use one of the WLC ports only for guest and plug in the router(if your ISP router is a professional one and not home based), and request your ISP to use the same WAN link for Guest and configure internal DHCP on the ISP router.

You have to create a dummy or private Vlan for this.

Hope it helps.

Re: Creating Multiple Vlan on Cisco 2504 Controller

okoroji80 — Mon, 15 Jan 2018 19:34:13 GMT

Hello Scoott,

i have setup my config as stated in the topology however the Dynamic interfaces associated to the vlans are showing as disabled.

Moreso the Radios are not broacasting their SSID

Re: Creating Multiple Vlan on Cisco 2504 Controller

okoroji80 — Mon, 15 Jan 2018 19:59:19 GMT

i have setup my config as stated in the topology however the Dynamic interfaces associated to the vlans are showing as disabled.

Moreso the Radios are not broacasting their SSID

Re: Creating Multiple Vlan on Cisco 2504 Controller

Scott Fella — Mon, 15 Jan 2018 20:05:29 GMT

Post some screenshots so we can actually see what you are referring to.

Re: Creating Multiple Vlan on Cisco 2504 Controller

okoroji80 — Tue, 16 Jan 2018 10:15:24 GMT

Attached is the Pix with the WLAN Config