topic Re: guest internet local breakout in Wireless

guest internet local breakout

ahmad.syed — Mon, 05 Jul 2021 20:18:53 GMT

Hi Team,

We are discussing to deploy guest internet locally at site rather than using Anchor controller present in DC using internet link at DC.

Can you please help with steps , how we can achieve

Re: guest internet local breakout

Sandeep Choudhary — Tue, 02 Mar 2021 11:45:12 GMT

In that case you have to use flex connect Central authentication and local switching.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/81680-hreap-modes.html

Regards

Dont forget to arte helpful posts

Re: guest internet local breakout

ahmad.syed — Mon, 15 Mar 2021 11:55:59 GMT

With having foreign controller only , can we get Guest portal services from ISE. My question is , we want to have guest network locally with flexconnect design . But wanted that guest user should get access through ISE with guest portal .

Can we achieved? If yes how ?

Re: guest internet local breakout

Scott Fella — Mon, 15 Mar 2021 15:41:31 GMT

Just search for “Cisco FlexConnect ISE CWA” and you will find information on how to configure what you want. If you have the 9800’s, then just add that into the above search to get configuration examples.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html

Re: guest internet local breakout

ahmad.syed — Tue, 16 Mar 2021 06:12:37 GMT

Hello @Scott Fella ,

Thanks for response. We have 5520 WLC . Can we achieve this in 5520 as we want both corporate and Guest SSID to be served by same AP in flexconnect.

Re: guest internet local breakout

Puru — Fri, 24 Feb 2023 09:00:45 GMT

Hi Ahmad,

We have similar requirement, When you able to achieve this? If yes, can please advise how? Did you have to install additional Anchor controller locally and tunneled with Foreign controller over WAN Link?

Regards,

Puru

Re: guest internet local breakout

JPavonM — Fri, 24 Feb 2023 09:43:35 GMT

That design with localy forwarded clients (not anchored) is same for both C9800 and AireOS WLCs using Flexconnect and you can have a mix of Corporates and Guests in different SSIDs been forwarded to different VLANs.

The routing decition to use a central Internet circuit to forward traffic would be accomplished using a IPSEC or GRE tunnel between the remote site and DC (using routers or FWs) or by using VRFs.

Re: guest internet local breakout

Puru — Fri, 24 Feb 2023 09:59:26 GMT

Thank you

Appreciate your Response. I was looking for anchored solution.

Regards,

Puru