Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Configuring Guest Access

Posted on 2007-11-20
1
Medium Priority
?
954 Views
Last Modified: 2013-11-09
I'm needing help configuring a wireless guest network. I've never setup a vlan and need some guidance. We have HP 420 wireless access points (with the default ssid using 802.1x), HP 5400 switches (running at layer 2); and Cisco 2800 series routers. Right now everyone is on default vlan 1. I want to make the guest vlan 5.  
The router seems to be the big question for me. How do I configure the router for the new vlan and how do I word the ACL to limit the guest users?
0
Comment
Question by:gaskew
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 2000 total points
ID: 20331265
Can't help with the HP switch, but make sure you set the port that the router connects into as a trunk port and include vlan 1 and vlan 5.

On the router, setup a vlan subinterface:

interface Fastethernet 0/0.5
 encap dot1q 5
 ip address 10.20.30.1 255.255.255.0
 ip nat inside
 access-group 101 in

Add whatever IP subnet you are assigning to the guest wireless vlan to the nat acl:

access-list 1 permit 10.20.30.0 0.0.0.255  <= guest vlan
access-list 1 permit 10.10.10.0 0.0.0.255  <= internal LAN
ip nat inside source list 1 interface serial0/0/0 overload  <== whatever you have already

To restrict access between the networks, define acl 101 that gets applied to the interface:
 access-list 101 deny ip 10.20.30.0 0.0.0.255 10.10.10.0 0.0.0.255
 access-list 101 permit ip any any

Done

0

Featured Post

Will your db performance match your db growth?

In Percona’s white paper “Performance at Scale: Keeping Your Database on Its Toes,” we take a high-level approach to what you need to think about when planning for database scalability.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
In the modern office, employees tend to move around the workplace a lot more freely. Conferences, collaborative groups, flexible seating and working from home require a new level of mobility. Technology has not only changed the behavior and the expe…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question