Solved

Cisco Aironet 1040 Series - Standalone, with Guest Access

Posted on 2013-01-15
3
1,118 Views
Last Modified: 2013-03-08
Hi All,

I'm going to purchase a Cisco Aironet for a small business.  I'd really like to enable "Guest Access" so that I may provide visitors Internet access without accessing our corporate network.  Can I provide Guest Access to visitors and provide access to internal resources for their staff with one Aironet 1040 series standalone (w/o controller) ?
0
Comment
Question by:polaris101
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 25

Expert Comment

by:Ken Boone
ID: 38779825
Yes you can but its a two part deal. Basically from the AP perspective you will have it trunked to 2 vlans.  1 being corporate users and the other being guest users. You will then have 2 SSIDs set up on the AP.  The SSID will then be mapped to the appropriate vlan. So that is what is done at the AP level.

The second part is what you need to do with the vlan/firewall setup for the "guest" network.
 At that point its up to you what you do with it.  So once you have a corporate wireless user they can get to anything because you bridged it over to the corporate vlan.  The guest vlan though typically would go straight to a port on your firewall bypassing the internal network.  Then the firewall would provide the internet access.
0
 

Author Comment

by:polaris101
ID: 38780149
Thanks for the help.  Do you know if you have to have a RADIUS server with the 1140 series if I choose WPA for authentication ?
0
 
LVL 25

Accepted Solution

by:
Ken Boone earned 500 total points
ID: 38780185
If you use WPA/WPA2 enterprise then you will need a back end authentication server if you use WPA/WPA Personal then you just need to set a pre-shared key. You can do either.  You don't need radius if you are going to go with a pre shared key.
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security is one of the biggest concerns when moving and migrating your data from your on-premise location to the Public Cloud.  Where is your data? Who can access it? Will it be safe from accidental deletion?  All of these questions and more are imp…
Using in-flight Wi-Fi when you travel? Business travelers beware! In-flight Wi-Fi networks could rip the door right off your digital privacy portal. That’s no joke either, as it might also provide a convenient entrance for bad threat actors.
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question