Can we connect Wireless guest network to ASA?

[mbsiddiqui1]

Hi,

We have two ISP 1. MPLS and 2. For Guest - Fiber Broadband. How to secure our Corporate Network from Guest Network as both are connected to our Cisco ASA5515.

Regards,

Mohammed

[Reza Sharifi · Accepted solution]

Hi,

You can deploy access list to block communication between the corporate and guest vlan and only allow access to the Internet for guest vlan.

HTH

[Seb Rupik · Accepted solution]

Hi there,

Create a new Guest VRF on your core switch. It should contain all your guest wireless interfaces and a point-to-point link to your ASA.

This will keep traffic seperated on your core, there only way devices in different VRFs will be able to communicate will be via the ASA.

cheers,

Seb.

[mbsiddiqui1]

Most of the staff will connect to guest wifi. How can I allow and access Exchange ActiveSync using the Guest Wireless? 

Regards,

Mohammed

[Reza Sharifi]

Hi,

As long as the guest is in a separate vlan/subnet, you can use the access-list to allow exchange ActiveSync IPs to communicate with guest and also have them access the Internet. As for DNS on guest network, you can point them to an external DNS (8.8.8.8).

HTH