Guest WIFI users having access to Corporate Data

[Tazio4436]

Hi,

I am using Cisco WLC 2500 series with 2 SSID.

First one is for Corporate Users (SSID CU Users) and second one is for guest users (SSID Guest).

They both have 2 separate vlans with different subnet and ip range.

We just noticed that Guest users can still have access to our shared drives. It was not like this before. I take care of the network side and there is another team that takes care of the IT part.

I did not make any change on the network side.

Under WLANs and then Interface both for CU Users and Guest it is showing correct interface.

Under CONROLLER and then Interface the correct VLAN Identifier is there.

Can someone please let me know f I am missing something here? Or it might have to do with the IT part on DC?

Thanks

Tazio

[Flavio Miranda]

You wifi setup seems ok but we dont know the whole topology. The fact that you separated corp and guest in different vlans does not means much.  

[Leo Laohoo]

This is not a wireless issue but a router and FW issue.

[balaji.bandi · Accepted solution]

If you looking Guest network to access corporate, its more of risk factor, they need to come via VPN using guest network is good option, 

i

[Tazio4436]

Hi,

Issue was on the WLC.

Couple of month ago we did some work on the WLC to change he Primary WLC as Secondary and the Secondary as Primary because of License issue.

The New Primary WLC did not have this box checked under Controller---->Interfaces---->Access Control List