topic Re: Wireless access for visitors in Wireless

Wireless access for visitors

patrick.lopez — Sun, 04 Jul 2021 16:01:59 GMT

Can someone suggest the best way to set up wireless access for visitor’s (non company employees) internet access only. We would like to secure the access point so only permitted visitors could attach to the AP with the least administrative effort.

I was thinking two access points. One using PEAP or LEAP to authenticate our employees. The other for the visitors. We could use access lists to permit only web traffic but I am not sure about the security set up for this situation. Something that is not a lot of administrative effort but secure. Is there such a solution?

How does McDonalds do it?

Thanks

Re: Wireless access for visitors

c.tenley — Wed, 24 Sep 2003 12:25:13 GMT

You could use only one AP if they are Aironet APs. A simple solution would be to create two VLANs, one for employees, that uses PEAP or LEAP, and a guest VLAN, that is open. Create a ACL (Access Control List) on your switch/routers that the AP is connected to that only permits the guest VLAN to point towards your internet gateway. Here is a link on how to set up multiple VLANs:

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/ap350scg/ap350ch4.htm

Re: Wireless access for visitors

patrick.lopez — Wed, 24 Sep 2003 12:54:29 GMT

Thanks,

That much I understand.

I was trying to avoid just any visitor connecting or strangers nearby connecting and using my internet bandwidth.

Any way around this problem?

Thanks

Re: Wireless access for visitors

travis-dennis_2 — Wed, 24 Sep 2003 16:20:28 GMT

I would still do what c.tenly suggested but you could also put a MAC filter on the AP. Only cards that are on your list can pass traffic. True you have to get the MAC address from the visitor and put it on the list but I don't see any other way to accomplish what you want.

Re: Wireless access for visitors

patrick.lopez — Wed, 24 Sep 2003 17:00:29 GMT

Thats what I thougt. I wanted to post it to get some feedback.

I am curious how McDonalds is going to set this up.

I read that they are going to be selling 1 hour access times for $3.

Are they going to input each mac address?

See link below:

http://www.mcdonalds.com/countries/usa/whatsnew/pressrelease/2003/03112003/index.html

Re: Wireless access for visitors

travis-dennis_2 — Wed, 24 Sep 2003 17:24:38 GMT

No. What I hear is that they will be using some form of username/password authentication. No Mac filter. You pay your money and they give you a reciept with the info.

Re: Wireless access for visitors

BERNHARD FIEGLMUELLER — Thu, 25 Sep 2003 04:35:17 GMT

I think they use BBSM, so you also could use a BBSM for your Problem:

http://www.cisco.com/en/US/products/sw/netmgtsw/ps533/ps3987/index.html

bernhard