topic Re: configure guest wlan on wlc 2106 to give only internet acce in Wireless https://community.cisco.com/t5/wireless/configure-guest-wlan-on-wlc-2106-to-give-only-internet-access-to/m-p/1462747#M122965 <HTML><HEAD></HEAD><BODY><P>Vinod,</P><P></P><P>Hopefully you've found a solution by now, but I wanted to respond anyway in case others find this useful.</P><P></P><P>There are quite a few options for Guest WLANs.&nbsp; The answer to your question depends on the security policies where the controller is being deployed.&nbsp; If you are allowed to have an open WLAN, that's probably the easiest solution - but is also the least secure as it does nothing to prevent unauthorized access to the wired network.</P><P></P><P>Another solution would be to create an SSID with only a single user account authorized on it, but allowing unlimited similtaneous logins for that user account.&nbsp; This would provide a minimum level of security, is relatively simple to configure, but would not work with the security requirements of most organizations.</P><P></P><P>The most secure guest wireless network would employ some kind of temporary authorization utilizing guest accounts, WPA2 encryption, and tunnel the guest traffic off your organization's LAN&nbsp; - but this sounds like overkill for your needs and would require a 4400 or 5500 series WLC.</P><P></P><P>My recommendation would be for you to read "Deploying and Troubleshooting Cisco Wireless LAN Controllers," available from Cisco Press.&nbsp; It goes through many possible guest network scenarios.</P><P></P><P>If you can reveal any of your security requirements and more details of the guest network you envision, I can provide more specific advice.</P><P></P><P>Best of luck!</P><P></P><P>Tim</P></BODY></HTML> Tue, 28 Sep 2010 23:41:12 GMT purgrider 2010-09-28T23:41:12Z configure guest wlan on wlc 2106 to give only internet access to guest users https://community.cisco.com/t5/wireless/configure-guest-wlan-on-wlc-2106-to-give-only-internet-access-to/m-p/1462746#M122964 <P>Hi,</P><P></P><P>I have wlc 2106 which is connected to my l3 switch 4503 , I have configured wlc 2106 with one wlan but now i would like to get one more wlan which will have access for only internet to guest users&nbsp; ...</P><P></P><P>What should i do on WLC 2106 or what commands are useful to fulfil this requirements.</P> Sun, 04 Jul 2021 02:06:45 GMT https://community.cisco.com/t5/wireless/configure-guest-wlan-on-wlc-2106-to-give-only-internet-access-to/m-p/1462746#M122964 vinodjad1234 2021-07-04T02:06:45Z Re: configure guest wlan on wlc 2106 to give only internet acce https://community.cisco.com/t5/wireless/configure-guest-wlan-on-wlc-2106-to-give-only-internet-access-to/m-p/1462747#M122965 <HTML><HEAD></HEAD><BODY><P>Vinod,</P><P></P><P>Hopefully you've found a solution by now, but I wanted to respond anyway in case others find this useful.</P><P></P><P>There are quite a few options for Guest WLANs.&nbsp; The answer to your question depends on the security policies where the controller is being deployed.&nbsp; If you are allowed to have an open WLAN, that's probably the easiest solution - but is also the least secure as it does nothing to prevent unauthorized access to the wired network.</P><P></P><P>Another solution would be to create an SSID with only a single user account authorized on it, but allowing unlimited similtaneous logins for that user account.&nbsp; This would provide a minimum level of security, is relatively simple to configure, but would not work with the security requirements of most organizations.</P><P></P><P>The most secure guest wireless network would employ some kind of temporary authorization utilizing guest accounts, WPA2 encryption, and tunnel the guest traffic off your organization's LAN&nbsp; - but this sounds like overkill for your needs and would require a 4400 or 5500 series WLC.</P><P></P><P>My recommendation would be for you to read "Deploying and Troubleshooting Cisco Wireless LAN Controllers," available from Cisco Press.&nbsp; It goes through many possible guest network scenarios.</P><P></P><P>If you can reveal any of your security requirements and more details of the guest network you envision, I can provide more specific advice.</P><P></P><P>Best of luck!</P><P></P><P>Tim</P></BODY></HTML> Tue, 28 Sep 2010 23:41:12 GMT https://community.cisco.com/t5/wireless/configure-guest-wlan-on-wlc-2106-to-give-only-internet-access-to/m-p/1462747#M122965 purgrider 2010-09-28T23:41:12Z