Secure guest access

Unanswered Question
Jul 13th, 2007
User Badges:

I have setup a VLAN on our stack of 3750's for use by guests connecting to our guest wireless network. An ACL enforces that they can only access our proxy on port 80.

Is it safe to let them use DHCP to get an IP from our DHCP server on our corporate LAN? should i use the ip-helper command? do I need to add a rule to the ACL to allow them to access the DHCP server?

also are there any other commands i should add to the vlan interface to make it more secure? thanks in advance.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
didyap Fri, 07/20/2007 - 05:45
User Badges:
  • Silver, 250 points or more

I think you need the failover interface-name ip address command for Failover to be configured. Dynamic Host Configuration Protocol (DHCP) leases must be set to never expire. You can also statically configure the IP addresses on the hosts that need to be accessed from the Internet.


This Discussion