Restricting Guest Access

[Scott Hanson]

All,

is there a way on the controller to restrict the Guest SSID to Internet only access?  If possible I wanted to do it there and through ACLs on the router as an extra measure.

Thanks in advance!  Replies rated

[johnd2310]

Hi,

This depends on how your guest network is configured. Does it terminate on the Internal network or on a DMZ.

You could configure an access list on the controller to deny all your subnets and allow everything else.

Thanks

John

[mohanak]

Create two dynamic interfaces on the WLC, one for the guest users and the other for internal users.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html