New wireless setup

[datamodule]

I have a project to setup wireless internet for guests and employees and i am new to this i have the following questions

Hardware we Have

• Wireless lan controller AIR-CT2504-25-K9 (Cisco 2500 series)
• Cisco Aironet 1600 series wireless access points (Antenna type 1600e)

1) Do we need to setup two interfaces (one is for internal and another external(internet VLAN) on wireless controller to provide internet connectivity

2) If i want to restrict users to access only specific ports(80,443,25 etc) through wireless how do i do this?

Can some one help me understanding the proper solution for this

Thanks for your help

[Ashish Chandra]

1. Yes create two interface and map it to two SSID's just for ease.

2. NO, its not possible with wlc

[tsuyoshi-kk]

Hi,

2) If i want to restrict users to access only specific ports(80,443,25 etc) through wireless how do i do this?

You may take a look on controller Application Visibility and Control (AVC) to see if it can fulfill your requirement.

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

Cheers,

KK

[kaaftab]

well you can have ACL for that network at the firewall (guest network) but a better solution would be ISE for guest access