04-19-2014 10:32 PM - edited 07-05-2021 12:43 AM
Hi
what are the best practices to configure Wireless Guest Access with Bandwidth control per user session and blocking youtube.com. Appreciate document links to move forward
Are the following - Doable or Not Doable
Thanks
CP
Solved! Go to Solution.
04-20-2014 06:54 AM
There is no real best practices for guest access because each company or vertical might have restrictions to how to implement guest access. Guest access can be simplified on the WLC or you can use ISE for guest or OnBoarding for BYOD devices. To log usage you really need a 3rd party software or appliance for that. WLC has AVC with v7.6 (works) that you can set limits on bandwidth, drop, etc on various applications. With v8.0, there will be better functionality, but that will not be out til mid year. AVC can be used with ISE or radius to override WLAN setting to users, which is nice. If you want to track each user, bandwidth used or real customization, then look at some 3rd party wifi hotspot software and or appliances.
04-20-2014 06:54 AM
There is no real best practices for guest access because each company or vertical might have restrictions to how to implement guest access. Guest access can be simplified on the WLC or you can use ISE for guest or OnBoarding for BYOD devices. To log usage you really need a 3rd party software or appliance for that. WLC has AVC with v7.6 (works) that you can set limits on bandwidth, drop, etc on various applications. With v8.0, there will be better functionality, but that will not be out til mid year. AVC can be used with ISE or radius to override WLAN setting to users, which is nice. If you want to track each user, bandwidth used or real customization, then look at some 3rd party wifi hotspot software and or appliances.
04-20-2014 12:49 PM
Hi,
You could also use Cisco meraki to achieve the level of application visibility you want - this allows you to block certain applications, and you can shape bandwidth on a per user basis. (eq cheap but you may end up with 2 systems) Or you could point your firewall at scansafe to proxy your guest wifi access, if you want to - I think this generally means all non-domain users are put into a default group, for which you can configure a suitable use policy. Although scansafe is not suitable for controlling bandwidth on a per user basis on its own. For that as Scott has recommended you would need version 7.6 of WLC software to use AVC.
HTH
Mike
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide