wifi guest anchor connection

[Andrey128]

I was proposed following diagram for connection of wifi guest anhor:

Firewall-1: to restrict traffic between LAN and DMZ

Firewall-2: provider's device

Is it correct design when anchor is connecting by G1 interface towards firewall-1 and by G-2 interface - towards firewall-2? If it is correct would be good to have some related information.

[Rasika Nayanajith]

Pls refer below for wireless Geust anchoring. You require another controller in your LAN.

Also typically you connect WLCs to a switch. In your DMZ, you should have a switch where you define SVIs (unless that firewall is dedicated to wireless traffic termination)

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/WirelessNetwork_GuestAccessService.html

HTH

Rasika

*** Pls rate all useful responses ***

[Andrey128]

yep,

I am not at that elementary level.

Local WLCs are on LAN.

VLAN is expected to be terminated on firewall-2.

The question: is it possible to use anchor as per  diagram, one interface connected to firewall-1 and another is to firewall-2.

If I had a layer-3 switch I would not ask this question.