Securing network from Guest wireless

[jgorman1977]

We have multiple AP's with a mgt VLAN, internal VLAN, and guest VLAN. The AP's connect to our switch core, but I need to secure our internal network from the guest wireless. Guest wireless should only go out to Internet.

Attached is our AP and Switch configs.

[drolemc]

There are various authentication methods available with Cisco APs to secure your guest and internal network. You can use 802.1x based WPA authentication on your internal network and WPA-PSK on your guest network. Here is a document which has information on the different authentication mechanisms available with Cisco APs.

http://www.cisco.com/en/US/docs/wireless/access_point/12.2_15_JA/configuration/guide/s15auth.html

[Mehdi_ab]

Isolate the guest by L2 vlan all the way to your firewall/router virtual interface and use ACL/FW rules to permit access only to internet...