Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN on Guest Network

I've recently deployed some 5508 WLC's for internal use, 1 4402 WLC as a guest anchor controller (on DMZ) and a WCS server.  I'm having some difficulty getting a VPN connection to work over a guest SSID.  I've setup the guest SSID according to the Cisco config guides (for both internal and external WLCs). For layer 3 security on that SSID it is set to "Web Policy" with "Pass Through" and email input.  Normal internet access works just fine, but VPNs don't seem to work over it.  Is there something that I'm missing in setup that would prevent them from working?

New Member

Re: VPN on Guest Network


if you go to --> WLANs --> edit the WLAN --> Security --> Layer3 --> there is a pull down menu right beside Layer 3 Security were you'd choose "VPN Pass-Through"

Have you done that also !?

Kind regards,


New Member

Re: VPN on Guest Network

Yep, tried that.  But it also doesn't apply to the 5500 series WLCs.  And don't the WLAN settings need to be identical for both the internal and external WLC's?

New Member

Re: VPN on Guest Network

I just add the VPN IP details into the pre-auth ACL and apply it. works for us