Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Using a 1600 AP can I create a VLAN offering guest users isolation from others?

I can configure SSIDs, assign to radios and accept guests.  All guests have full access to resources on the subnet (printers, servers, each other).  I need to create an SSID (by attaching to a VLAN?) that will offer guests isolation from each other (cannot see other local resources) but have full internet access.  Like a coffee-shop.  Can't see how or where to attack this in the web interface.

Everyone's tags (1)
2 REPLIES
Gold

Hi,You could use below logic

Hi,

You could use below logic.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68097-accesspt.html

You will have to apply the acl on the sub interface rather than on physical interface.

On the ACL for guest vlan you can deny all production network subnets.

I hope that helps.

Regards

Najaf

 

Cisco Employee

Create different Vlan for the

103
Views
0
Helpful
2
Replies
CreatePlease to create content