Guest Anchor

Unanswered Question
Nov 2nd, 2009
User Badges:

Hi All,

I have a question if a guest anchor can support multiple VLANs for one SSID over EoIP? With AP groups this is possible, for example one SSID can be the same in different locations (meaning different VLANs/dynamic interfaces) but can this be done with a guest anchor?

To setup a guest EoIP tunnel the interfaces are defined as Management (on foreign WLC) and a guest-dmz interface (on the anchor WLC). If you are using say web-authentication and try agin to use the same ssid with another interface (guest-dmz2) there seems to be some problem. anyone come across this before or know of a solution? i could configure different ssids to the different interfaces but wonder if it could be possible using the same ssid...there seems to be some limitation

Any suggestions?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
weterry Mon, 11/02/2009 - 20:05
User Badges:
  • Silver, 250 points or more


AP-Groups only work with the APs, and since mobility is passed with the controller IP, there is no way for AP groups to function on the Anchor.

Now an interesting feature request might be to do a controller-group override, so that all clients from controller X go to one interface, and controller Y go to another, but I've never heard anyone ask for it.

Bottom line, as far as i know, is that you're going to need two different SSIDs to have clients in different interfaces on the Anchor

clarkmat Mon, 11/02/2009 - 23:29
User Badges:

perhaps there is a feature possibility here as there must be a way to differentiate the guest users on the same guest vlan via AP mac address or something so that these can be mapped to different interfaces.

was there ever such a feature?

different SSIDs work and i could apply different languages per SSID put i still prefer one global SSID!

thanks for answering

richard.leadbet... Tue, 11/03/2009 - 10:36
User Badges:

I believe that this can possibly be achieved by using a RADIUS server to auth the guest clients and return a RADIUS-VSA that instructs the Guest-Anchor of the VLAN to push the Guest user to. However, I haven't attempted to test this yet and am still at the stage of thinking it's possibly wiser and simpler to discuss having different Guest-SSIDs with a Country based suffix to my customer.


clarkmat Tue, 11/03/2009 - 23:32
User Badges:

also seems like a good option, never tested either though.

think i will go with different SSIDs and see if there is a feature that supports this later on. Just increases the number of SSIDs by a lot on a global solution.


This Discussion



Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode