Restricting internet access for staff

[samirshaikh52]

Hi Experts,

We had implemented  internet access for the students in college campus. Perhaps, recently we've noted the college staffs bring up their laptops and connect to Wifi and get internet access. Consuming the bandwith for non-business purposes.

Summary for Network Scenario:

We had cisco router 857,connected to cisco switch 3560 and wireless aironet access points connected to this switch and  distributed over the floor.

please kindly help me in restricting the internet access for staffs.

Regard's

Samir

[samirshaikh52]

Thanks Collin for your support and clarification.

[Imran Ul Haq]

Is the Cisco ISE a replacement for VMPS?

Regards

[lonix1977]

hi shamir, mac address blocking or whitelisting may not be scalable as the network grows or as the number of unauthorized terminals increase. It would be better to do it in layer 3 as suggested above. You may either blocklist VLAN assigned for uncontrolled terminals (wi-fi and classroom/library ports), or whitelist a VLAN for your authorized devices, whichever is more convenient for you.