VPN on Guest Network

Unanswered Question
Jun 22nd, 2010
User Badges:

I've recently deployed some 5508 WLC's for internal use, 1 4402 WLC as a guest anchor controller (on DMZ) and a WCS server.  I'm having some difficulty getting a VPN connection to work over a guest SSID.  I've setup the guest SSID according to the Cisco config guides (for both internal and external WLCs). For layer 3 security on that SSID it is set to "Web Policy" with "Pass Through" and email input.  Normal internet access works just fine, but VPNs don't seem to work over it.  Is there something that I'm missing in setup that would prevent them from working?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
rdvorak Tue, 06/22/2010 - 14:43
User Badges:


if you go to --> WLANs --> edit the WLAN --> Security --> Layer3 --> there is a pull down menu right beside Layer 3 Security were you'd choose "VPN Pass-Through"

Have you done that also !?

Kind regards,


jplowick3 Tue, 06/22/2010 - 14:48
User Badges:

Yep, tried that.  But it also doesn't apply to the 5500 series WLCs.  And don't the WLAN settings need to be identical for both the internal and external WLC's?

BRYN JONES Mon, 06/28/2010 - 01:36
User Badges:

I just add the VPN IP details into the pre-auth ACL and apply it.

..it works for us


This Discussion



Trending Topics - Security & Network