09-12-2004 10:48 PM - edited 07-04-2021 09:58 AM
Can anyone help me to find out how to configure guest mode VLAN & one secure VLAN. I want guest mode VLAN to be configured without any authentication and trusted VLAN association only with MAC & LEAP authentication.
Regards,
09-16-2004 08:18 AM
I don't think the concept of guest VLAN is there in WLAN.
09-16-2004 01:57 PM
True, but a WLAN Guest Access Network can be a WLAN VLAN configuration, so you have alternatives for WLAN Guest access:
*Create a Guest WLAN VLAN with no encryption, open authentication, and a broadcast SSID (or tell Guests what it is).
*Same as above with Authentication Options (like BBSM/IOS-Authentication-Proxy and/or specialized clients like 802.1x.
*Add application filters, time of day controls, and/or IDS schemes as needed/required.
Hope this helps.
09-21-2004 01:05 PM
I have a trusted and untrusted VLAN in my WLAN. Just setup the VLANs and create LEAP accounts on the ACS server for both VLANs
ex. VLAN 100 Trusted
VLAN 101 Untrusted
Setup username VLAN100
password xxxxxxx
Do you have your devices in ACS setup in groups?
09-21-2004 08:13 PM
Hi ,
I could resolve the issue by doing the following.
1) I have created 2 SSID and assigned different VLANs to the same. Guest SSID configured with open/shared access and Secure SSID configured with EAP/MAC Authentication. VLAN restriction configured in the MSFC.I could find if we are selecting shared access , clients are able to join AP even without SSID. So it resolved my problem.
Thanks for all your responses.
Regards,
Shibu
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide