topic Re: SSID & Access Lists in Wireless

SSID & Access Lists

Neville Price — Sun, 04 Jul 2021 03:38:55 GMT

I have been asked to configure the following:

1. Create a specific SSID with 802.1x Authentication (Done)

2. Create access lists, to only allow users connected to that specific ssid access only to CITRX, is this possible?

We are attempting to connect iPads to our wireless network, for Dr's to use as part of their day to day duties.

Re: SSID & Access Lists

Stephen Rodriguez — Wed, 31 Aug 2011 12:38:39 GMT

Yes this is possible. When you create the ACL remember to set the out and in policy for the user VLAN and the citrix server farm, if you create the ACL on the WLC. Also don't forget to allow dns access.

Sent from Cisco Technical Support iPad App

Re: SSID & Access Lists

Neville Price — Wed, 31 Aug 2011 13:01:52 GMT

Thanks for that, Is there a document that explains the procedure.

Re: SSID & Access Lists

George Stefanick — Wed, 31 Aug 2011 15:41:51 GMT

I would like to piggy back on Steves comment.

If it were me. I would put the ACL on the SVI interface of the wireless vlan. So traffic gets dropped right after the WLC. I'm not a fan of ACLs on the WLC.

So on your "Dr WLAN" you have a interface / (vlan 10 for example). On that SVI interface for VLAN 10 allow access to the servers and other items like DNS (as Steve pointed out). Then deny everything else.

Make sense?