cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
383
Views
0
Helpful
2
Replies
bruce9000
Beginner

Using a 1600 AP can I create a VLAN offering guest users isolation from others?

I can configure SSIDs, assign to radios and accept guests.  All guests have full access to resources on the subnet (printers, servers, each other).  I need to create an SSID (by attaching to a VLAN?) that will offer guests isolation from each other (cannot see other local resources) but have full internet access.  Like a coffee-shop.  Can't see how or where to attack this in the web interface.

2 REPLIES 2
kcnajaf
Rising star

Hi,

You could use below logic.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68097-accesspt.html

You will have to apply the acl on the sub interface rather than on physical interface.

On the ACL for guest vlan you can deny all production network subnets.

I hope that helps.

Regards

Najaf

 

mohanak
Cisco Employee

Create
Recognize Your Peers
Content for Community-Ad