anchor controller and guest access

[ring zer0]

In a wireless scnerio following are objectives:

- Assign same subnet IPs to guest users irrespective of the location they connect to in the network
- Issolate guest traffic from rest of the network.

To achieve above task I was recommended 2 Wireless controller, one of them which will act as anchor controller. Data would first be sent to first controller which will analyze the guest user id and password. It will then send the data to anchor controller which will route it to internet. 

Is there a possiblty to do this in only 1 wireless controller?

[Rasika Nayanajith]

Hi,

If you put this anchor controller in your DMZ area then you can isolate traffic terminating onto it from rest of your network.

Then you have to have another controller in your normal network to terminate CAPWAP & give corporate wireless. In this setup Guest WLAN you can tunnel back to anchor controller where guest users won't get IP from your normal network, but from anchor controller in DMZ.

So to achieve set requirement you need to have two WLCs. Read this design guide for more detail

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/emob73dg/emob73/ch10GuAc.html#wp999559

HTH

Rasika

**** Pls rate all useful responses ****