[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 455
  • Last Modified:

Cisco Wireless SSID

I have a client that would like to give visitors the ability to access their wireless network (cisco 1200 series access point), but don't want them to be able to access the production network....  I'm not sure how to do this, is it as simple as creating a second ssid, give it a different subnet and trunk the port????

Any help her is appreciated....

thanks
Randy
0
rhcellxion
Asked:
rhcellxion
1 Solution
 
RPPreacherCommented:
That simple.  You may need some ACL between the 2 subnets & a trunk port between the AP & the switch.
0
 
Craig BeckCommented:
Assuming you know how to create a new VLAN on your network...

Configure the port on the switch where the AP connects as a trunk port.
Create 2 VLANs on the AP.  One VLAN should be tagged as the Native VLAN.
Create a new SSID for the Guest VLAN then associate one VLAN to the production SSID and one VLAN to the Guest SSID.
Enable PSPF on the Guest SSID so guest users can't see each-other.
Create an ACL on your router to block traffic from the Guest VLAN to the production VLAN.  You can also do this on the AP as an extra measure.

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_configuration_example09186a00801d0815.shtml#cli6kios
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now