Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a guest WLAN setup. We are using P2P Blocking on this WLAN and have it set to "Drop". This blocks all connectivity between connected devices on the guest WLAN. Works great. Controller is a 3504.Question is this: Is it possible to Whitelist ...
My ultimate goal is that I want to be able to contain rogue AP's that are detected broadcasting (spoofing) SSID's that our controller is broadcasting. I see that this can easily be done at: Security>Wireless Protection Policies>Rogue Polices>General>...
We have most of our ports configured for both data and voice using the Cisco method of using switchport voice vlan. Example of our config:
interface GigabitEthernet1/0/1
switchport access vlan 10
switchport mode access
switchport voice vlan 20
...
I am currently migrating from Cisco access switches (3750's) to Juniper access switches (ex3400's). I have a 4402 controller with many AP's operating in local mode. I am simply trying to understand the AP behavior I am seeing as I do have a working ...
We currently have a WLC 4404 with 1142 AP's. We plan to upgrade to a new WLC 3504 and 1852 or 2802 access points.
Assuming the wireless design is the same and that it is configured properly, I am curious what are the main benefits we will see with...
Ok. And ACL does not apply for lateral? I noticed I can create an ACL and then set on the WLAN advanced tab to 'override the interface ACL'. I guess this just applies for traffic in and out of the interface used by the WLAN though and not P2P traff...
@Reza Sharifi wrote:
If you just want to use the port for a phone (vlan 20), you can remove the data port
no switchport access vlan 10
HTH
Ok. Easy enough.
However, does "switchport voice vlan" do anything else other than create a separate VLA...
@RichardAtkin wrote:
A Native VLAN on a Trunk and an interface configured as an Access Port are the same thing in this scenario - the switch accepts a frame without any .1Q tag info and forwards it on to whatever the Native/Access VLAN is for that ...
