Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

wireless and guest network and HREAP

Hi,

I have inherited a wireless infrastructure which comprises of a head office with WCS and WLC plus LWAPP access points.

There is a sub office in another town who wishes to deploy a wireless infrastrucure and it struck me that as they only want to deploy a couple of AP's that HREAP would be good to use in this senario.

However they want to also use the guest wireless network that we have in the head office but I dont want their guest traffic to come to our DSL modem that we have set up for the HO guest wireless. The two offices are connected via an MPLS link which doesnt need anymore traffic on it.

Is there a way of configuring the HREAP and the WLC and WCS so that the sub office breaks out locally for guest and yet the lobby admin at HO can control the password?

Many thanks,

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: wireless and guest network and HREAP

Hi Nell,

the feature you are looking for is "H-REAP local switching".

So you can set the remote AP to H-REAP mode (which optimizes it for "behind a WAN link") and from there you can set several ssids as "local switching".

this means that everything about the authentication phase is handled by WLC but after authentication, the traffic is dropped locally at the AP and doesn't transit through the WLC.

The guest SSID has to be enabled for local switching and then, on the H-REAP APs, go in the AP configuration (from WLC "wireless" tab, then click on ap) and in the hreap tab, you can configure the vlan where the guest traffic will be dropped on  the remote site. It must be a vlan that exists on the remote site and users will get a DHCP address on that vlan.

Regards,

Nicolas

1 REPLY
Cisco Employee

Re: wireless and guest network and HREAP

Hi Nell,

the feature you are looking for is "H-REAP local switching".

So you can set the remote AP to H-REAP mode (which optimizes it for "behind a WAN link") and from there you can set several ssids as "local switching".

this means that everything about the authentication phase is handled by WLC but after authentication, the traffic is dropped locally at the AP and doesn't transit through the WLC.

The guest SSID has to be enabled for local switching and then, on the H-REAP APs, go in the AP configuration (from WLC "wireless" tab, then click on ap) and in the hreap tab, you can configure the vlan where the guest traffic will be dropped on  the remote site. It must be a vlan that exists on the remote site and users will get a DHCP address on that vlan.

Regards,

Nicolas

1130
Views
0
Helpful
1
Replies
CreatePlease to create content