Abstract scenario: corporate apartment.
I would like to deploy (prefer autonomous) a "hybrid" style access point policy at company apartments. This would have one SSID that gives nothing more than general internet access at the site via local internet service, and another SSID that connects the user into the company network with the same policy of being on-prem. I would like to avoid rolling a WLC at each site, or extra equipment such as dedicated router/VPN endpoint, if at all possible.
Example:
SSID playtime - (visible) requires WPA2-Personal authenticadtion for general internet, no access to corp net
SSID worktime - (hidden) tunnels back to WLC over a VPN and requires WPA2-Enterprise auth via WLC policy
If this is just plain impossible, please say so. We can always whip out a VPN client on laptop. If it's possible, but requires extra equipment, I'd like to discuss that as well.
