topic well you can have ACL for in Wireless

New wireless setup

datamodule — Mon, 05 Jul 2021 07:36:43 GMT

I have a project to setup wireless internet for guests and employees and i am new to this i have the following questions

Hardware we Have

Wireless lan controller AIR-CT2504-25-K9 (Cisco 2500 series)
Cisco Aironet 1600 series wireless access points (Antenna type 1600e)

1) Do we need to setup two interfaces (one is for internal and another external(internet VLAN) on wireless controller to provide internet connectivity

2) If i want to restrict users to access only specific ports(80,443,25 etc) through wireless how do i do this?

Can some one help me understanding the proper solution for this

Thanks for your help

1. Yes create two interface

Ashish Chandra — Thu, 03 Apr 2014 19:42:37 GMT

1. Yes create two interface and map it to two SSID's just for ease.

2. NO, its not possible with wlc

Hi, 2) If i want to restrict

tsuyoshi-kk — Mon, 07 Apr 2014 03:09:07 GMT

Hi,

2) If i want to restrict users to access only specific ports(80,443,25 etc) through wireless how do i do this?

You may take a look on controller Application Visibility and Control (AVC) to see if it can fulfill your requirement.

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

Cheers,

well you can have ACL for

kaaftab — Mon, 07 Apr 2014 16:33:17 GMT

well you can have ACL for that network at the firewall (guest network) but a better solution would be ISE for guest access