cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1043
Views
0
Helpful
1
Replies

Setting up guest acount to only go to the internet.

cdzoo
Level 1
Level 1

I'm a bit new to the ESW 520 Switch but I am trying to set up a port that will be hooked up to an Access Point & I only want it to connect to the Internet & be isolated from the rest of the network. I know I have to have two differant VLANs to make this happen but from there I can not find any other information. I am using the Cisco WAP 4410N Access Point. Where can I go to direct this one port to the internet only?

1 Reply 1

alissitz
Level 4
Level 4

What type of router are you using?  Can it support VRFs or multiple VLANs?   VRFs can also be used to segregate trafffic inside your network, however you will need multiple internet drops for this.  Using VRFs is a great way to separate your guest network within another network.

On your switch and router, you can create a guest vlan, and map it to a SSID on the AP.  Then users who connect to this SSID will also be mapped to this VLAN.

If you have a single internet connection, then you will need to create ACLs which prohibit this guest vlan from being routed back into and able to talk to your corp vlan.  ACLs can accomplish this

For how-to help, please consult the config guides.

HTH,

Andrew Lissitz

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Switch products supported in this community
Cisco Business Product Family
  • CBS110
  • CBS220
  • CBS250
  • CBS350
Cisco Switching Product Family
  • 110
  • 200
  • 220
  • 250
  • 300
  • 350
  • 350X
  • 550X