Creating WLAN secure segments - advanced filtering?

[hxnussba]

I have a WLAN. It has all the latest and greatest security features available from Cisco. I have now been asked the following:

a) a user that connects should be limited to a preset list of ports (i.e. 80 and 53). How do I go about doing this?

b) a user connecting would be assigned to a certain VLAN, i.e. some users would be on a non-secure WLAN VLAN whereas others would be on a secure WLAN VLAN. How do I go about setting this up?

Thanks,

Hank

[ndoshi]

a ) AP allows you to configure ip protocol and ip port based filter list .

Here is the doc on it .

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/ap350scg/ap350c3b.htm

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/ap350scg/ap350axb.htm

b) In 12.0 firmware you can create different SSID based on different vlan and you can give different security measure to different set of SSID and VLAN .

You can have one guest vlan and ssid and have open authentication

[hxnussba]

This doesn't help much. I am looking to create a different port permit list for each individual user connecting. Your links merely show me how to modify an AP to limit the ports it accepts for all users.

-Hank

[aonibala]

If you have AP 1100, then you may create ACL and VLAN as if the AP is a router...wonderful :-)

Audie