wireless guest access

[cisco.plus]

Hi

what are the best practices to configure Wireless Guest Access with Bandwidth control per user session and blocking youtube.com. Appreciate document links to move forward

Are the following - Doable or Not Doable

1. When an executive guest login to Guest Internet, welcome page popup with his/her name and message 'internet access allowed'
2. Activity recorded for guest access ( sites accessed / bandwidth usage )
3. Restrict no of guest session on each AP

Thanks

CP

[Scott Fella · Accepted solution]

There is no real best practices for guest access because each company or vertical might have restrictions to how to implement guest access.  Guest access can be simplified on the WLC or you can use ISE for guest or OnBoarding for BYOD devices.  To log usage you really need a 3rd party software or appliance for that. WLC has AVC with v7.6 (works) that you can set limits on bandwidth, drop, etc on various applications. With v8.0, there will be better functionality, but that will not be out til mid year. AVC can be used with ISE or radius to override WLAN setting to users, which is nice.  If you want to track each user, bandwidth used or real customization, then look at some 3rd party wifi hotspot software and or appliances. 

[luckymike33]

Hi,

You could also use Cisco meraki to achieve the level of application visibility you want - this allows you to block certain applications, and you can shape bandwidth on a per user basis. (eq cheap but you may end up with 2 systems) Or you could point your firewall at scansafe to proxy your guest wifi access, if you want to - I think this generally means all non-domain users are put into a default group, for which you can configure a suitable use policy. Although scansafe is not suitable for controlling bandwidth on a per user basis on its own. For that as Scott has recommended you would need version 7.6 of WLC software to use AVC.

HTH

Mike