Whats the best way to setup a guest side on a WLAN? I already looked at the SAFE blueprint. We currently have a 1300 with two cisco 12 dbi Omnidirectional antennas. We are covering an area about 1/4 mile, plenty to cover one of our campus locations which covers about 1 mile.
I have vlan'd out the WLAN management is in a different vlan than the guest network, have access-lists and a time-range statement on the access group to narrow it down to just DHCP/DNS/WWW/SSL on the routing device (IDS sits in front of this network as well). However, CIO wants it user friendly as possible for "guests". It currently has a WEP key only on the guest side which we give out when they ask to use it since most know how to config that. Our own employees connect to same device under different vlan via LEAP with AES.
It seems that everyone has their own preference how they allow guest access. Is there a easy way to get guests on, and still provide secure access under the same device for corporate employees?
