Deployment for Internet SSID

[osamaibrahim_2011]

Hi,

I have new request which I'm looking for your guidance and advice, as I don't have that much experience in wireless.  

the request details as below:

we need to provide internet for specific persons located in different locations, this internet access should be through existing WLAN infrastructure, which have 8540wlc and 1832i AP.

this access must be secured, and user authentication should be through ISE.

I have prepared below steps for this deployment, please advise if any point does not correct or it need advance configuration.

1- create new SSID.

2- create new AP group and assign the new SSID to this group.

3- assign this AP group to the APs in that specific location.

4- for AP authentication part I have to configure the AAA IP in SSID security.

please feel free to correct me in above points, also your advice regarding configuring the authentication policy in ISE.

Kind Regards. 

[balaji.bandi]

yes that is correct steps , only apply to the area of the AP required.( you are doing that too)

[osamaibrahim_2011]

Hi Balaji,

thanks for your reply, would you please explain for how to isolate this network from local intranet? and how to secure the same.

BR, 

[balaji.bandi]

You need extend that VLAN to DMZ and internet.

do you have any network diagram for us to give better advise.

[Haydn Andrews]

Dont forget to include the other required SSIDs to the AP groups.

Also do they require link to be completely segregated from the corporate network? If so then you need to look at the security requirements of the wired network, or look at an anchored solution to a DMZ WLC.

[osamaibrahim_2011]

Hi Haydn,

yes you're correct, we need this SSID totally isolated from local network, please would you explain more for this isolation and required security configuration.

BR,