Bypassing specific traffic on Guest SSID

[jaydhindsa]

Hey guys,

I have a guest access setup with WISM and Anchor controllers in DMZ for internet access. L2 security policy is based on WAP2+PSK awith Layer3 on web authentication. Would it be possible to let un-authenticated users to connect to some web sites say Cisco.com (That is without being authenticated by WLC).

Thanks in advance,

Jay

[dancampb]

Sure, that is what the preauthentication ACL is for. Just create an ACL on the WLC and under the WLAN select that ACL for the preauth ACL on the layer-3 security tab. Anything that is permitted by the ACL will be allowed to pass through the controller regardless if the client has authenticated yet or not.

[jaydhindsa]

Thx, I will try that. will let you know if face some problems.

Jay