WAP321 how to setup separate Guest SSID

[Michiel Beenen]

Hello there,

I was wondering if anyone could tell me how to setup a separate SSID for guests (without a password).

Basically, we have one SSID now called Mnet which has a WPA2 password.

For guests coming in i want Mnet Guests where people can connect without needing a password.

They should be able to use internet but not connect to LAN devices, any idea how to accomplish this with this WAP321?

Help would be greatly appreciated, Thank you!

Michiel

[Jegan Rajappa]

Hi Michiel,

Just create new SSID and in security mode select disabled, so connection will be open and every one can connect without authentication.

Jegan

[Michiel Beenen]

That is really awesome but that doesnt put them on not seeing LAN devices of the first SSID

And is there also a way to put a maximum amount of clients on that separate guest ssid?

[Tom Watts]

Michiel, you may enable the channel isolation which means wireless clients can't communicate to other wireless clients. If this isn't an option, you would require a vlan to separate traffic.

• When enabled, the WAP device blocks communication between wireless  clients on the same VAP. The WAP device still allows data traffic  between its wireless clients and wired devices on the network, across a  WDS link, and with other wireless clients associated with a different  VAP, but not among wireless clients

[Michiel Beenen]

Does that disable them to connect to other LAN connected devices aswell?

[Tom Watts]

No, let's say you have Private ssid and Guest ssid. If you enable channel isolation on both SSID, wireless client's can't talk to one another but they may talk to wired devices.

If you're looking for a true segmentation without cutting off any communication within the same VAP, you should be looking in to VLAN. However, your network (router /layer 3 device will need to support the vlans).

[Michiel Beenen]

So you are saying there is no way to make a guest ssid that wont be able to connect to other LAN devices  (so only internet) without an extra router/switch?

[Tom Watts]

Hi Michiel, this depends what your current network will support. The short answer is yes, you will need something that supports vlans if your current network equipment does not.

If you have a small network your best bet is buying a router that supports vlans. This will keep costs down and likely give you a beefier router that can handle a few more connections.

-Tom
Please mark answered for helpful posts