Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Next step for a wifi guest network

All,

 

Now that an excellent engineer helped me get my wifi waps to work, wap1242.  I was thinking about creating a guest network that is not part of the internal LAN.

 

I have one Cisco switch, and one firewall.  Should I create a VLAN for the guest network and assign a different network to it?  The on the firewall route all traffic out to the Internet, via the same gateway or a different gateway?

 

I think the Cisco switch I have can do private vlans.  Would this feature help in this case?

 

As always, thanks all in advance for all the help.

 

Best regards.

 

 

4 REPLIES

refer http://www.cisco.com/en

refer http://www.cisco.com/en/US/docs/wireless/access_point/12.3_7_JA/configuration/guide/s37ssid.html

New Member

Thanks Soldh.  Not really

Thanks Soldh.  Not really what I was looking for.

Guess I was looking for more detail.

 

Such as:

 

1. Do I create a separate VLAN for the WAPs? The WAPs in use is only the internal LAN and GUESTS.

2. The WAPS are already on the internal LAN via IP.

3. How do I tell the WAPs that they have two SSIDs to signal?  Do I just add both SSIDs to the dotradio0/1?

4. Is there a way to limit the bandwidth for the GUEST SSID to say 5MB?  I have a 100MB Internet, and do not want the guests to connect to the WAPs and start using the bandwidth.

 

I am not a wifi guy, so I do not know how to make sense of this doc that I saw before to work for me.

 

 

hello dude, you can do either

hello dude,

 

you can do either this or that (private Vlan on switch , or separated out-band vlan for guest),

 

if you don't mind that guest users to utilize internal network , you can create separated vlan for guest users , and apply policy mapping (to limit bandwidth) in the firewall/router guest interface , refer to link below :

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113435-wlan-user-rls-00.html

 

if you don't want guest users to communicate to each other use private vlan feature on switch ,

see link below , to see the needs of private vlans and how to configure it in switch:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swpvlan.html

 

choose what is suitable for your network needs

Bronze

Hi,Please refer the below

Hi,

Please refer the below link

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1240/quick/guide/ap1240qs.html

61
Views
0
Helpful
4
Replies
CreatePlease to create content