Guest access through a wired network?

jkeeffe · ‎05-01-2007

We have a network with several remote sites all connected to our main campus through a high speed metropolitan optical ethernet. We're running EIGRP and use a public class-b address space. We are strickly a layer-3 routed network in our WAN, core and distribution layer.

Now we're being asked to supply limited access for vendors who want to bring a laptop in, plug it into our network, and get internet access.

What is the best way to do that without going to a full-blown 802.1x world?

Is it through GRE tunnels on a private address space?

All ideas are welcome.

jamilakhtar · ‎05-02-2007

Hi,

Depends how many guest users come in, I would create a small subnet for them with restricted access and issue the static ip addresses. That will give yu control over them and easy to manage as well as easy to know that exactly what they been upto. Only a suggestion.

Regards,

guruprasadr · ‎05-02-2007

HI,

1.Create a Subnet with minimum of 30 Hosts.

2.Create a VLAN name "Vendor" in Core Switch.

2.Create a access lists for this Subnet / VLAN in the Core Switch / Internet Router & permit only to access the HTTP / 80 Service.

Hope this Helps you.Pls Rate.

Best Regards,

Guru Prasad R