Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Guest network

Is placing a guest network on the DMZ, with access via its own VLAN on the corp switch a viable option? The ASA would protect the guest network. Currently a SFTP server resides on the DMZ.

2 REPLIES

Re: Guest network

This is a normal practice - the only secure requirement is that no other layer 3 interface exists in the VLAN apart from the physical interface of the firewall.

HTH>

New Member

Re: Guest network

I did not quite understand your reply. The Cisco switches are on a single VLANxx. Is it safe to create a VLANzz with IP scheme of dmz. VLANzz would have two wireless access points for guests.

217
Views
0
Helpful
2
Replies
CreatePlease to create content