• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 459
  • Last Modified:

Cisco Wireless SSID

I have a client that would like to give visitors the ability to access their wireless network (cisco 1200 series access point), but don't want them to be able to access the production network....  I'm not sure how to do this, is it as simple as creating a second ssid, give it a different subnet and trunk the port????

Any help her is appreciated....

1 Solution
That simple.  You may need some ACL between the 2 subnets & a trunk port between the AP & the switch.
Craig BeckCommented:
Assuming you know how to create a new VLAN on your network...

Configure the port on the switch where the AP connects as a trunk port.
Create 2 VLANs on the AP.  One VLAN should be tagged as the Native VLAN.
Create a new SSID for the Guest VLAN then associate one VLAN to the production SSID and one VLAN to the Guest SSID.
Enable PSPF on the Guest SSID so guest users can't see each-other.
Create an ACL on your router to block traffic from the Guest VLAN to the production VLAN.  You can also do this on the AP as an extra measure.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now