Segment PIX/LAN traffic to different VLANs for Wireless Guest Access

Currently I have a number of remote offices that have the following configuration.

Cisco 1811W (Wireless & Wired) -> PIX 506E -> Internet

These offices access the internet directly and the PIX has a VPN tunnel to our corporate office.  Each remote office is identical and currently has a completely flat network using the default vlan.

At our main office I support a number of SSIDs linked to different VLANs on Cisco 1100s.  I have a public VLAN that is behind a captive portal that permits internet access for our guests and vendors.  I am attempting to find a way to provide a secondary SSID at these remote offices that is completely independent of the office network.  

I think the only way I can do this is to create a second VLAN on the 1811W and then VPN that VLAN traffic back to my public wifi/captive portal controller.  I can't seem to find a way to originate VLANs on the PIX and trunk them to the 1811W.  I have found a number of references to VLAN support on the PIX, but nothing definitive.  When I do a 'show ver' on my 506e I don't see VLANs listed.

Any help/suggestions would be much appreciated.

thanks,
WilliamKillionAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

decoleurCommented:
the 506e has limited vlan support. to configure a vlan on a pix you create subinterfaces and assign them to the appropriate vlans. and example would be:
int fa 0/0
no shut
int fa0/0.2
vlan 2
nameif guest
security level 50
int fa 0/0.5
vlan 5
nameif inside
security level 100

it might be easier for you to create the subinterface on the router and create an acl to prevent access from the guest network to your infrastructure.

hope this helps,

-t
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Wireless Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.