topic Securing network from Guest wireless in Wireless

Securing network from Guest wireless

jgorman1977 — Sat, 03 Jul 2021 22:03:32 GMT

We have multiple AP's with a mgt VLAN, internal VLAN, and guest VLAN. The AP's connect to our switch core, but I need to secure our internal network from the guest wireless. Guest wireless should only go out to Internet.

Attached is our AP and Switch configs.

Re: Securing network from Guest wireless

drolemc — Wed, 12 Dec 2007 19:15:25 GMT

There are various authentication methods available with Cisco APs to secure your guest and internal network. You can use 802.1x based WPA authentication on your internal network and WPA-PSK on your guest network. Here is a document which has information on the different authentication mechanisms available with Cisco APs.

http://www.cisco.com/en/US/docs/wireless/access_point/12.2_15_JA/configuration/guide/s15auth.html

Re: Securing network from Guest wireless

Mehdi_ab — Thu, 20 Dec 2007 23:20:01 GMT

Isolate the guest by L2 vlan all the way to your firewall/router virtual interface and use ACL/FW rules to permit access only to internet...