cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1717
Views
13
Helpful
8
Replies
Highlighted
Beginner

How to hide internal network in WLC

Dear all  i have cisco Wlc in that i create 3 sis id.

i i want to give only internet access to one SSID which Can not access internal service. can any one please tell how to do block and next is to hidden SSID with protection.

regards.

8 REPLIES 8
Highlighted
VIP Mentor

Hi,

Check this doc to implement Guest and Internal WLAN:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html

to Hide SSID  or disable broadcasting:

you can Hide it under WLANs > click WLAN ID > General > uncheck "Broadcast SSID"

Regards

Dont forget to rate helpful posts

Highlighted

Dear Sandeep,

I tried the above link.. but when i disable broadcast i am not able to add it mannually, and i want to hide my internal services and give only internet access how can i do that??

Highlighted

first: you need to create two SSID , one for guest and and one for corporate access.

you can use the link which i sent in my last post.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html

Which type of devices you are using to implement Guest and Corporate access ?

Are you using RADIUS server ?

***Hide SSID means, just you can not see it. it is nothing to do with internal services or just internet.

Regards

Don't forget to rate helpful posts

Highlighted

yes i am using cisco wireless controller and cisco aironet 2602 caps.

i created 3 SSID all three  are now working my question is i want to block tha guest users not to access lan thy only access internet (Wan).

Regards,

Highlighted

Take a totally diff subnet(Diff from LAN) for Guest and then route this IP subnet to directly to internet on router or on firewall.

More info: http://superuser.com/questions/569710/how-to-create-a-separate-subnet-for-wireless-access

Regards

Don't forget to rate helpful posts

Highlighted

Dear sandeep when i disabble ssid broadcasting then i can not find it mannually and one more question is i is that any other way to block guest to access lan they should access only wan because i cant change the subnet of guest ..

regards,

Highlighted
Beginner

Dear
COnfigure your subnet gateway for the SSID to be on router or on firewall.
and route this IP subnet to directly to internet

Please rate if helpfull
Highlighted
Enthusiast

you have to create an ACL and apply it to the guest SSID on the advanced tab.  It can still share the interface for the normal SSID.

All of 13 lines..

 

You need to permit DNS access

deny inhouse targets

permit local segment to 0.0.0.0

Content for Community-Ad