How to hide internal network in WLC

[shazeb051]

Dear all  i have cisco Wlc in that i create 3 sis id.

i i want to give only internet access to one SSID which Can not access internal service. can any one please tell how to do block and next is to hidden SSID with protection.

regards.

[Sandeep Choudhary]

Hi,

Check this doc to implement Guest and Internal WLAN:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html

to Hide SSID  or disable broadcasting:

you can Hide it under WLANs > click WLAN ID > General > uncheck "Broadcast SSID"

Regards

Dont forget to rate helpful posts

[shazeb051]

Dear Sandeep,

I tried the above link.. but when i disable broadcast i am not able to add it mannually, and i want to hide my internal services and give only internet access how can i do that??

[Sandeep Choudhary]

first: you need to create two SSID , one for guest and and one for corporate access.

you can use the link which i sent in my last post.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html

Which type of devices you are using to implement Guest and Corporate access ?

Are you using RADIUS server ?

***Hide SSID means, just you can not see it. it is nothing to do with internal services or just internet.

Regards

Don't forget to rate helpful posts

[shazeb051]

yes i am using cisco wireless controller and cisco aironet 2602 caps.

i created 3 SSID all three  are now working my question is i want to block tha guest users not to access lan thy only access internet (Wan).

Regards,

[Sandeep Choudhary]

Take a totally diff subnet(Diff from LAN) for Guest and then route this IP subnet to directly to internet on router or on firewall.

More info: http://superuser.com/questions/569710/how-to-create-a-separate-subnet-for-wireless-access

Regards

Don't forget to rate helpful posts

[shazeb051]

Dear sandeep when i disabble ssid broadcasting then i can not find it mannually and one more question is i is that any other way to block guest to access lan they should access only wan because i cant change the subnet of guest ..

regards,

[aysar3000]

Dear
COnfigure your subnet gateway for the SSID to be on router or on firewall.
and route this IP subnet to directly to internet

Please rate if helpfull

[David Ritter]

you have to create an ACL and apply it to the guest SSID on the advanced tab.  It can still share the interface for the normal SSID.

All of 13 lines..

You need to permit DNS access

deny inhouse targets

permit local segment to 0.0.0.0