topic 2500 seriesWireless Controller configuration in Wireless

2500 seriesWireless Controller configuration

scottcummins — Mon, 05 Jul 2021 18:00:53 GMT

Good Day Cisco Gurus

I currently have two 2500 series Controllers that re set up as an HA pair, I have two wireless networks configured.

Guest: the guest is currently configured to allow access to the domain resources, I inherited these controllers and am trying to reconfigure the guest network to be a true guest network with access only to the internet and allowing guest access through the ISE device we have as well which will supply a temp password using an e-maill adrerss they provide and a password supplied by the ISE

Internal: the internal domain I want to ensure is configured so that employees have to log in using their AD credentials and has access to CERTIAN domain assets.

I know this is a general and over arching question about generl configuration. If someone could pont me to any documentation on exactly how to configure it or even some sample configurations it would be greatly appreicated

Thank you very much

Re: 2500 seriesWireless Controller configuration

Flavio Miranda — Mon, 16 Sep 2019 18:53:43 GMT

You can find tons of documentation talking about detailed guest implementation on the internet. It is actually quite simple the WLC part. The ISE part may be more complex.

Guest:

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth-config.html

Corp:

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/201044-802-1x-authentication-with-PEAP-ISE-2-1.html

-If I helped you somehow, please, rate it as useful.-

Re: 2500 seriesWireless Controller configuration

scottcummins — Mon, 16 Sep 2019 20:14:13 GMT

Flavio

Thanks so much, I wiull utilize the articles and return to give an update

Re: 2500 seriesWireless Controller configuration

patoberli — Tue, 24 Sep 2019 14:09:53 GMT

For the resources they are allowed to access, you could use ACLs on the WLC. But if you have a central firewall, then I suggest to use that one to steer the access.