Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Securing network from Guest wireless

We have multiple AP's with a mgt VLAN, internal VLAN, and guest VLAN. The AP's connect to our switch core, but I need to secure our internal network from the guest wireless. Guest wireless should only go out to Internet.

Attached is our AP and Switch configs.

2 REPLIES
Silver

Re: Securing network from Guest wireless

There are various authentication methods available with Cisco APs to secure your guest and internal network. You can use 802.1x based WPA authentication on your internal network and WPA-PSK on your guest network. Here is a document which has information on the different authentication mechanisms available with Cisco APs.

http://www.cisco.com/en/US/docs/wireless/access_point/12.2_15_JA/configuration/guide/s15auth.html

Community Member

Re: Securing network from Guest wireless

Isolate the guest by L2 vlan all the way to your firewall/router virtual interface and use ACL/FW rules to permit access only to internet...

387
Views
0
Helpful
2
Replies
CreatePlease to create content