Using a 1600 AP can I create a VLAN offering guest users isolation from others?

[bruce9000]

I can configure SSIDs, assign to radios and accept guests.  All guests have full access to resources on the subnet (printers, servers, each other).  I need to create an SSID (by attaching to a VLAN?) that will offer guests isolation from each other (cannot see other local resources) but have full internet access.  Like a coffee-shop.  Can't see how or where to attack this in the web interface.

[kcnajaf]

Hi,

You could use below logic.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68097-accesspt.html

You will have to apply the acl on the sub interface rather than on physical interface.

On the ACL for guest vlan you can deny all production network subnets.

I hope that helps.

Regards

Najaf

[mohanak]

Create different Vlan for the guest, refer the config guide:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/69773-vlan-ap-config.html