how to: audit guest user traffic and keep it out of the tunnel

[David Ritter]

Hi all,

Project:
Install AP in county library for local client use to the cloud via cable/dsl (vlan3) and maintain usage counters.
Manage the AP thru the cloud, over the existing (3rd party) library network (vlan2), no client traffic.
Sounds just like an OEAP using the private ssid.  Just no accounting that way.

I read somewhere that ver 8.0 would let us flex internet traffic local and route everything else thru the tunnel,
but that probably would not provide a usage audit either.

[Dhiresh Yadav]

Hi ,

Yes, the traffic going back towards WLC can be audited if you use some WLC Internal tool like AVC or use Netflow etc.

For the traffic switched locally , you will have to use some tool based on the Switch.

Regards

Dhiresh

**Please rate all helpful posts**

[David Ritter]

Hi all,

Well the question had a bit of obfuscation built in.

I trunked my AP from the local switch...  native vlan 125.  Vlan 16 is the dsl pop.

AP links to the WLC via 125.  Flex ssid is linked to the local vl16.  The flex ssid is wpa2/psk and the WLC tracks all associations there-too with MAC/IP data, adequate to create user/count data.

Too simple.  I was thinking ACL's and all the rest.

Thank you