topic The WLC only does the proxy in Wireless

Locking down guest wireless network

Colin Higgins — Mon, 05 Jul 2021 07:57:07 GMT

I have a Cisco 5508 WLC with a guest network set up on it. The WLAN uses local authentication and grants access through an ASA to the Internet.

I just found out that the customer now wants to limit where wireless clients can go on the Internet by URL, etc. Since the wireless clients have to use the WLC as a proxy in order to join the network, I am not sure the best way to accomplish this.

How is this typically done in a reasonable and economical manner?

You will need a content

jmeachum — Thu, 05 Jun 2014 01:54:28 GMT

You will need a content filter. If there is not too many users/bandwidth then you could use a Meraki MX60 ($495 list) or MX80 ($1995) to filter the traffic.

Since the wireless users have

Colin Higgins — Thu, 05 Jun 2014 03:32:09 GMT

Since the wireless users have to use the WLC for a proxy, how would the Meraki filter URLs?

Can it do wccp? Some kind of transparent proxy function?

The WLC only does the proxy

jmeachum — Thu, 05 Jun 2014 12:25:24 GMT

The WLC only does the proxy for the Web-auth, after the user has successfully authenticated there is no more proxy. Be careful when setting up web filtering for Web-auth if the web page the station is trying to hit can not be resolved by DNS then the Web-auth page will fail to come up.

I hope this helps.

John

Hi,For this case we have

abwahid — Tue, 10 Jun 2014 11:06:13 GMT

Hi,

For this case we have option CPU ACLs

this feature were introduced with WLC firmware release 4.0.

Go through below link for further configuration detail.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html#cpuacl