topic Re: guest wireless security in Wireless

guest wireless security

zli — Sun, 04 Jul 2021 06:55:14 GMT

My client concerns about the guest WLAN security, and the client would like the guest WLAN only access to the Internet and not its other vlans, specailly the server vlans. Could any one kindly provide the steps/methods to follow? BTW, the client uses cisco WLC 5508 and AP 3602i. Many thanks and kind regards,

Re: guest wireless security

Amjad Abdullah — Tue, 16 Apr 2013 05:43:36 GMT

You have to take care of that from the core side. You need to allow routing for that VLAN to outside only.

The other option (which requires two WLCs) is to set up an anchor controller in the DMZ and tunnel guest traffic between your internal WLC and the anchor WLC in DMZ.

read this: Wireless Guest Access FAQ

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"

Re: guest wireless security

Sandeep Choudhary — Tue, 16 Apr 2013 06:07:26 GMT

HI Zhi,

1. Police that vlan traffic either on the inside switch or on the ASA.

https://supportforums.cisco.com/docs/DOC-1230

2. Use websense for content scanning/filtering or use the CSC module on the ASA for http scanning/URL filtering.

http://www.cisco.com/en/US/docs/security/csc/csc6.1.1569.0/administration/guide/csc4.html

Regards

Re: guest wireless security

Saurav Lodh — Tue, 23 Apr 2013 02:29:02 GMT

Please follow this doc for guess access

http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.pdf