03-13-2016 05:00 AM - edited 07-05-2021 04:46 AM
Dear all can any body help me. i have to block lan access to guest user.. but guest id and whole internal network are in same subnet.
suppose 10.10.X.X guest ip is 10.10.202.X can any one help me .. when i try icmp, inbond ourbound all any any its blocking totally . i want to give internet access to guest network.
waiting for positive response
regards.
03-13-2016 03:51 PM
I wouldn't personally put the guest and internal networks on the same internal VLAN. I would make the guest network completely separate, and use a firewall to control/limit access.
However you can use ACLs on an SSID. Here is a guide saying how to do this.
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html
03-14-2016 02:22 AM
dear philip
i tryied the above link but its blocking me lan and wan.
actually i have ssid subnet and lan services subnet same. i am facing very difficulty with this istsue..
can u help me out,
can this be apply in firewall inside interface too?
thanks.
03-14-2016 12:30 PM
You are being blocked from accessing documents on Cisco's web site? You really are having some issues.
Try pairing your machine with a 3G SmartPhone, and accessing it directly over the Internet, or accessing it at another location and printing it out.
03-14-2016 10:31 PM
Dear Phillip when i disable access list then i can able to reach internet but with that i am also able to access my lan network service ..which i want to block this guest Ssid to access lan services..do u get my question?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide