Cisco EWC - restrict guest users to access only the "guest" SSID

[RFC_2549]

Hello,

on Cisco EWC is it possible to restrict the access of "guest" users only to a specific SSID, in this case the designed SSID for a guest user. We saw a guide https://wifininjas.net/2019/10/24/wn-blog-017-cisco-c9800-local-web-auth-config/, but with this kind of guide is possible to achieve the required result? The idea was to create a list of guests users to associate with the SSID that guests must use

Thank You

Kind regards

Giulia

[Leo Laohoo]

Lobby Administrator

[Flavio Miranda]

EWLC does not support Anchoring design. You can see it here on the datasheet at "Create a guest wireless network"

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-744299.html 

But if you refer only to the "Local Web auth" then yes, you can follow this guide.

[RFC_2549]

Hello, thank You @Flavio Miranda , we found that https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_guest_user_accounts.pdf, it can appliy also to EWC? At the moment I cannot test it

Thanks

[Flavio Miranda]

Cant see this link. Can you attached it again.?

[RFC_2549]

Hi, yes sorry, here is it: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_guest_user_accounts.pdf
The doc part that I was reffering to is under the "Assigning username to guest users in a WLAN (CLI)" section when it says "if wlan-profile-name is / is not ..."

Thanks

[Flavio Miranda]

It seems that you can run this combination of command:

If you use the "wlan-profile-name" here you are limitating guest users to that wlan

username "user_name" mac wlan-profile-name "profile_name"

If you dont spécify the "wlan-profile-name" then guest users can connect in any wlan

username user_name mac