Solved

Cisco Aironet 1100-Multiple SSID Setup

Posted on 2011-09-15
4
1,380 Views
Last Modified: 2013-12-21
I have a Cisco Aironet 1100 setup simply with a single SSID.  We have a single DHCP server (windows sbs box) and a standard gigabit switch (no vlan capabilities).  We need to create an additional guest network if possible.  I am new to Cisco products overall and am looking for a simple and basic way to accomplish this.  I am not certain if its even possible.  
0
Comment
Question by:wdabbs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 1

Expert Comment

by:U7_Web_Tech
ID: 36544166
is the guest network for internet and if it is what router\firewall are you using
0
 

Author Comment

by:wdabbs
ID: 36544171
Guest network will be internet only, we are using a Sonicwall TZ100
0
 
LVL 46

Accepted Solution

by:
Craig Beck earned 500 total points
ID: 36550518
You can't set restrictions per SSID unless you use VLANs, technically speaking.

There is a way you can do it in the CLI, but I wouldn't recommend it and it can get quite messy.  Also, it will affect your ability to configure the AP via the GUI.


If you can't do much in terms of LAN configuration I would do one of the following (depending on how your network is configured), but in any event it's not that simple to secure it if you have a basic network...

1] Install a new AP and let guests connect to that.  This will still allow guests to access your LAN though.
2] Install a wireless router and configure it so that guests only have access to the internet and not your internal network.

Ideally you want an internet router connected to a firewall which protects your LAN from the internet.  This would enable you to connect a wireless router to the internet gateway directly and therefore keep guests off your LAN.
0
 

Author Comment

by:wdabbs
ID: 36551156
Thanks, that is what  I figured but wanted to be certain.  We are just going to get an additional WAP and run it through the OPT port on the sonicwall which will allow us to create a DMZ.

0

Featured Post

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Need WiFi? Often, there are perfectly good networks that don't have WiFi capability - and there's a need to add it.  - Perhaps you have an Ethernet port into a network but no WiFi nearby. - Perhaps you have a powerline extender and no WiFi at the…
For Sennheiser, comfort, quality and security are high priority areas. This paper addresses the security of Bluetooth technology and the supplementary security that Sennheiser’s Contact Center and Office (CC&O) headsets provide.  
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses
Course of the Month11 days, 1 hour left to enroll

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question