Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Setting up guest acount to only go to the internet.

I'm a bit new to the ESW 520 Switch but I am trying to set up a port that will be hooked up to an Access Point & I only want it to connect to the Internet & be isolated from the rest of the network. I know I have to have two differant VLANs to make this happen but from there I can not find any other information. I am using the Cisco WAP 4410N Access Point. Where can I go to direct this one port to the internet only?

Everyone's tags (5)

Re: Setting up guest acount to only go to the internet.

What type of router are you using?  Can it support VRFs or multiple VLANs?   VRFs can also be used to segregate trafffic inside your network, however you will need multiple internet drops for this.  Using VRFs is a great way to separate your guest network within another network.

On your switch and router, you can create a guest vlan, and map it to a SSID on the AP.  Then users who connect to this SSID will also be mapped to this VLAN.

If you have a single internet connection, then you will need to create ACLs which prohibit this guest vlan from being routed back into and able to talk to your corp vlan.  ACLs can accomplish this

For how-to help, please consult the config guides.


Andrew Lissitz