topic Re: Guest Traffic Segregation without using Anchor Controller in Wireless

Guest Traffic Segregation without using Anchor Controller

Puneet Gupta — Sun, 04 Jul 2021 06:52:02 GMT

I need help in calrifiing , is there any other option avaialble to segregate the guest traffic from CORP on internal WLC itself without using anchor controller ?

Re: Guest Traffic Segregation without using Anchor Controller

Scott Fella — Mon, 08 Apr 2013 13:15:57 GMT

Sure... You either use ACL's or you don't use LAG on the WLC and you have one port connect to your DMZ.

Sent from Cisco Technical Support iPhone App

Re: Guest Traffic Segregation without using Anchor Controller

Puneet Gupta — Mon, 08 Apr 2013 13:20:49 GMT

Hi Scott

We have one cisco 4402 and one cisco 5508 WLC

Is it possible on both WLC ?

if yes , how can we achieve this ? i mean what will be configuration required on WLC?

Re: Guest Traffic Segregation without using Anchor Controller

Scott Fella — Mon, 08 Apr 2013 13:46:01 GMT

Well really can't tell you or else it would be a book. You either have use ACL's on your layer 3 to deny traffic from your guest subnet to your internal. Nothing has to change on the WLC. If you want to connect one port of the WLC to the DMZ, then disable LAG on the WLC and use port one as primary for the internal traffic which includes management and another port in the WLC as primary for the guest.

Sent from Cisco Technical Support iPhone App

Re: Guest Traffic Segregation without using Anchor Controller

Puneet Gupta — Mon, 08 Apr 2013 13:56:54 GMT

Hi Scott, Ahmed

Thanks for the help

I meant , if you can provide me any cisco documnet which shows this type of implementaion .

But what happens when phyical media or one po`rt goes down ? I think , there will be no redundnacy either for CORP or GUEST users.

Re: Guest Traffic Segregation without using Anchor Controller

mscherting — Mon, 08 Apr 2013 21:30:30 GMT

If you have your own MPLS network:

Create a guest vrf.

Create a guest subnet & vlan in the guest vrf.

Trunk the guest vlan to the WLC.

Create a guest interface in the guest subnet on the WLC.

Assign guest SSID/WLAN to the guest interface.

Not really practical to set up just for guest wireless but it works and scales well.