topic Re: Creating WLAN secure segments - advanced filtering? in Wireless

Creating WLAN secure segments - advanced filtering?

hxnussba — Sun, 04 Jul 2021 15:22:24 GMT

I have a WLAN. It has all the latest and greatest security features available from Cisco. I have now been asked the following:

a) a user that connects should be limited to a preset list of ports (i.e. 80 and 53). How do I go about doing this?

b) a user connecting would be assigned to a certain VLAN, i.e. some users would be on a non-secure WLAN VLAN whereas others would be on a secure WLAN VLAN. How do I go about setting this up?

Thanks,

Hank

Re: Creating WLAN secure segments - advanced filtering?

ndoshi — Fri, 22 Nov 2002 08:12:25 GMT

a ) AP allows you to configure ip protocol and ip port based filter list .

Here is the doc on it .

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/ap350scg/ap350c3b.htm

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/ap350scg/ap350axb.htm

b) In 12.0 firmware you can create different SSID based on different vlan and you can give different security measure to different set of SSID and VLAN .

You can have one guest vlan and ssid and have open authentication

Re: Creating WLAN secure segments - advanced filtering?

aonibala — Fri, 22 Nov 2002 13:04:49 GMT

If you have AP 1100, then you may create ACL and VLAN as if the AP is a router...wonderful 🙂

Audie

Re: Creating WLAN secure segments - advanced filtering?

hxnussba — Sat, 23 Nov 2002 17:32:42 GMT

This doesn't help much. I am looking to create a different port permit list for each individual user connecting. Your links merely show me how to modify an AP to limit the ports it accepts for all users.

-Hank