Advantages of using a seperate controller for guest access?

SHANNON WYATT · ‎01-10-2008

Can someone give me a good reason to use a seperate controller in a DMZ for guest users versus just trunking a DMZ VLAN to the controller. Certainly it makes sense to have a guest controller when you DMZ is not accessable to the controller locations (or you have a bunch of remote locations, but only one internet connection), but in the event that the controllers are located in a place that it can hit the DMZ is there a good reason to use a guest controller.

klein425 · ‎01-10-2008

The only good reason I've seen is to have guest access outside of your corporate network. Some companies aren't sold on letting guests connect inside their firewall and relying on access lists (and/or even NAC), for security. I can't think of any other reason.

SHANNON WYATT · ‎01-10-2008

I'm not even sure if that is a good reason. You can alway trunk to another non-routed VLAN and stick a cable modem and firewall to give guest user access. I'm working with someone now that thinks this is the way to go, but I've got to add a 4402-12, a switch (need GB connectivity for the controller) at a minimum. Again, it would make perfect sense if the location of the internet was not in the same building.