guest wlan internet access - best practice

[craigvoice]

I have wireless lan controller 2xxx and created a separate guest wlan and vlan and need to give them only internet access. If I have a PIX, should I put them in the PIX dmz and just have a switchport in guest vlan connected to PIX DMZ port?

Or is there a way to send both guest vlan and internal vlan thru inside interface of PIX?

[Scott Fella]

If you have a 2006 or 2106, you can setup the wlan ssid to go out one of the unused ports and that can go into the DMZ. Keep th eport for the management and ap-manager in the inside.

[Scott Fella]

Here are a couple links:

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008070ba8f.shtml

http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.html

Best Practice Guide

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a0080810880.shtml