Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Securing network from 'Guest' wireless

We have a vlan created for 'guest' wireless, but I am unsure of how to route them to the internet and keep them out of our production network.

They have their own subnet and terminate into a layer 3 catalyst. Do i need to implement vlan acl's or just point them to the internet vlan when they arrive at the catalyst?

Thank you

1 REPLY
New Member

Re: Securing network from 'Guest' wireless

I've got mine setup with a seperate VLAN right to the firewall (ASA5520). If your firewall is VLAN capable, create a new VLAN interface on the firewall and route all the traffic to it. Then put in deny rules for your inside subnets and allow rules for any after.

107
Views
0
Helpful
1
Replies