Access restrictions

[barry]

Using a aironet 1200 series AP, is there a simple way to route all traffic from one SSID to a certain IP address? My goal is to establish two separate SSID's. One will have full network access and the other will only have access to our firewall for internet access. Can this be done simply, and preferably without VLANs?

[kecampbe]

I think your best option will be to use VLANs. Using separate VLANs makes it relatively easy to enforce appropriate security and control over the wireless clients. If you don't separate them by VLAN, it seems like it would be much more difficult/complicated.

[belldj345]

1st, SSID-VLAN correlation is 1 to 1. You must have 2 vlans in order to have 2 SSIDs. 2nd, VLANs make the solution much simpler. VLAN interface definition provides the IP address you want to route to. You just need to be sure to allow the VLAN traffic on the port the AP is connected to and the port the target IP is connected to. It should travel through trunked port without a problem.