i have, one router, cisco 1721 and one AP aironet 1200. my router does have a wic with 4 fastethernet. my fastethernet 0 is my ISP. i plugged in my aironet on fastether 1.
physicly on the router itself, there will be no computer plugged in. all client will be wireless with the aironet. i am trying to figure out, if its possible, the way to setup 3 vlans, the first vlan is the native one. the second vlan will be myt trusted computers, and the third vlan will be wireless guest only.
is it possible to achive this? what would be the best recommanded place to get information ? i have managed to get wireless and client connected and go through the wan, with nat activated, but now, everyone is on the same vlan, which i want to separate.
my guess is that the aironet port will become a trunk, and i set up vlan on the wireless??? and the router, do i have to setup the same vlan configuration ? if so, do i need to setup each fastethernet port with the same vlan config ?!
i was hoping to achive something like this
vlan1 ( admin vlan only ) which will be used to connect to the admin insterfaces,
the ip will be like 22.214.171.124 / 24, the router will have .1 and the ap will have .5
vlan2, which will be trusted computers,
the ip will be 192.168.20.0 / 24, i want these guys, giving access to vlan1 to administer, and access to wan interface fastethernet 0 for internet.
vlan3 used for guest computers,
the ip will be 172.20.10.0 / 24, i want these guys giving access only to wan fastethernet 0 for internet access, with nat.
so i think i should set the router some configs and the same should be applied to the ap aironet...
any help, and maybe some document / how to would be appreciated!
Inviting all network professionals in operations! We'd like to understand what would be valuable for you in a mobile application. Your response will help Cisco improve a product feature that could benefit you. Thanks!
Click here to take the sur...
Cisco’s software-defined wide area network (SD-WAN) solution allows user to quickly and seamlessly establish an overlay fabric to connect an enterprise’s data centers, branch and campus locations, as well as colocation facilities in order to imp...
1. Log into CLI of DNAC:
ssh maglev@< DNAC appliance IP> -p 2222
2. Run this curl command to get token to get member id:
curl -X POST -u admin:<admin user password> -H -V https://<CLUSTER-IP>/api/system/v1/identitymgmt/token
Enterprise Switching Business Unit is glad to announce Beta release 16.12.2 for all Catalyst 9200/9300/9400/9500/9600 and Catalyst 3650/3850 Platforms. This release is made available to allow users to test, evaluate and share fee...
Purpose of the document
This document describes the general recommendations or best practices when designing and deploying the Cisco SD-Access technology. The document assumes that the reader has a general overview of Cisco's SD-Access for Distributed C...