Secure guest access

davehedgehog · ‎07-13-2007

I have setup a VLAN on our stack of 3750's for use by guests connecting to our guest wireless network. An ACL enforces that they can only access our proxy on port 80.

Is it safe to let them use DHCP to get an IP from our DHCP server on our corporate LAN? should i use the ip-helper command? do I need to add a rule to the ACL to allow them to access the DHCP server?

also are there any other commands i should add to the vlan interface to make it more secure? thanks in advance.

didyap · ‎07-20-2007

I think you need the failover interface-name ip address command for Failover to be configured. Dynamic Host Configuration Protocol (DHCP) leases must be set to never expire. You can also statically configure the IP addresses on the hosts that need to be accessed from the Internet.