topic Re: Guest Wireless Setup in Wireless

Guest Wireless Setup

peter.williams — Sun, 04 Jul 2021 00:54:30 GMT

Is there an example that somebody can give me to setup a guest wireless network that only has access to the internet through a vlan that does not use a wireless controller? I am looking for any suggestions.

Thank you

Re: Guest Wireless Setup

Robert.N.Barrett_2 — Tue, 04 Aug 2009 14:31:23 GMT

We use VRF on our 6500's, combined with WiSM's (in the 6500's), to shunt guest network traffic straight out to the inTARwebs. The Guest network definition on the WiSM is a different VLAN than the private network.

Re: Guest Wireless Setup

peter.williams — Tue, 04 Aug 2009 14:37:43 GMT

I have a 1231 AP connected to a 2960 switch which is connected to a 2811 router. I am using RADIUS to authenicate the users on the AD controller. I do not have a 6500 switch

Thank you

Re: Guest Wireless Setup

d-berlinski — Tue, 04 Aug 2009 15:35:52 GMT

Here is an example using ACL's to create a guest network. This prevents internal users from accessing internal private addresses and allows them to the internet.

interface Vlan199

description Guest

ip address 10.97.199.1 255.255.255.0

ip access-group 199 in

ip helper-address 10.xx

access-list 199 permit eigrp any any

access-list 199 permit udp any any eq bootps

access-list 199 deny ip any 10.0.0.0 0.255.255.255

access-list 199 deny ip any 172.16.0.0 0.15.255.255

access-list 199 deny ip any 192.168.0.0 0.0.255.255

access-list 199 permit ip any any