Solved: Guest Wireless Setup

peter.williams · ‎08-04-2009

Is there an example that somebody can give me to setup a guest wireless network that only has access to the internet through a vlan that does not use a wireless controller? I am looking for any suggestions.

Thank you

d-berlinski · ‎08-04-2009

Here is an example using ACL's to create a guest network. This prevents internal users from accessing internal private addresses and allows them to the internet.

interface Vlan199

description Guest

ip address 10.97.199.1 255.255.255.0

ip access-group 199 in

ip helper-address 10.xx

access-list 199 permit eigrp any any

access-list 199 permit udp any any eq bootps

access-list 199 deny ip any 10.0.0.0 0.255.255.255

access-list 199 deny ip any 172.16.0.0 0.15.255.255

access-list 199 deny ip any 192.168.0.0 0.0.255.255

access-list 199 permit ip any any

View solution in original post

Robert.N.Barrett_2 · ‎08-04-2009

We use VRF on our 6500's, combined with WiSM's (in the 6500's), to shunt guest network traffic straight out to the inTARwebs. The Guest network definition on the WiSM is a different VLAN than the private network.

peter.williams · ‎08-04-2009

I have a 1231 AP connected to a 2960 switch which is connected to a 2811 router. I am using RADIUS to authenicate the users on the AD controller. I do not have a 6500 switch