WLAN Security and GRE Tunnel

[gibsthomas]

Hi,

We are implementing a WLAN as in the attached figure. Planning to create 2 VLANS on AP, 1 for Employee's and other for Guest users. Employees should be able to access corporate network and we plan to create a GRE Tunnel so that guest users cannot access corporate network pass through the switches to use the DSL line attached to the core's. Where do I configure the tunnel at?. at the APs or at the distibution switch (1814FL) ?.. Any configuration guidance/ suggestions welcome.

Thanks in advance

Gibs

[b.hsu]

Use WLSM to terminate the wireless traffic on a GRE tunnel interface in the Catalyst Supervisor 720 in the Catalyst 6500 at the remote location

Specify one GRE tunnel interface per SSID .

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/switch_c/xcprt2/xccefc.htm

http://www.cisco.com/en/US/products/ps6128/prod_technical_reference09186a0080540634.html