Public & Private Access on same Access Point

ksarin · ‎07-23-2007

Hi folks -

I recently purchased Cisco 1131AG Access Points, which have the ability to create VLAN's. I want to provide staff with wireless access, and also the guests with wireless access.

Staff needs access to all network resources, and public needs just access to the Internet. In addition, I want to limit public to a certain bandwidth in addition to blocking them from downloading movies, music etc.?

Can anyone recommend a way to do this?

andrew.brazier · ‎07-24-2007

You're on the right track. You will need to configure two VLANs on the AP plus a default VLAN (which must be VLAN 1). You can then apply configure an SSID for each VLAN and apply security to each VLAN separately. You will then need to define the VLANs on your switches and configure the APs switchport as a trunk port.

Once you've done this you will need to restrict access from the visitor SSID/VLAN so that all it can do is access the Internet, you'll need some means of issuing clients with an IP address, give them access to DNS, etc.

As to limiting their bandwidth and blocking downloads, can't do that through the AP, that needs to be handled by your Internet connection and the devices that manage that.