Solved

Internet for Guests

Posted on 2014-02-02
4
279 Views
Last Modified: 2014-03-02
Hello Experts,

We have a Cisco Switch 3750G configured with 10 L3 VLANS. I am going to introduce Internet ADSL Router for guests only.

I have 5 AP distributed. The AP's will have 2 SSID  Guest and Corporate).

What would be the best way to setup network for guests to access internet only, while isolating our internal network subnet?
0
Comment
Question by:cciedreamer
  • 2
4 Comments
 
LVL 5

Accepted Solution

by:
dinkytoy101 earned 500 total points
ID: 39827701
Couple of possible options:

1. If only the only thing to guest -> internet then make them all the same layer 2 vlan and the default gateaway on the ADSL router. The 3750 is just passing them through so no access to the rest of the network. Quick and easy.

2. Not sure if the 3750 supports it but you could create a Guest VRF and route their traffic separately. More complex but scalable solution.

Not sure how you are handling any firewall/security bits though.
0
 
LVL 15

Expert Comment

by:Robert Sutton Jr
ID: 39827703
You can probably get away with using web authentication for the guest users and EAP for those on the Internal wlan. There are alot of different ways to achieve the same goal. Below you will find two examples listed but ultimately it comes down to your needs and your equipment available and or its capabilities. I hope this helps.

http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html


http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008070ba8f.shtml
0
 
LVL 3

Author Comment

by:cciedreamer
ID: 39828792
Thank you experts for the response.

From the above comments I have got 2 options

Option 1 ( no money involved) : Create a Vlan on the Switch without layer 3 ip addressing.
and Connect the router to this vlan. Then configure AP's SSID be in this vlan. The client will get the DHCP IP address from the router and it will be there defaul gateway

Option 2 ( money involved): This could be achieved by getting WLC. which is currently not our requirement. But I would be interested to know how much it can cost me to use for other customers lets say they have AP's more than 100.

Thanks
0
 
LVL 3

Author Closing Comment

by:cciedreamer
ID: 39898248
I am going with Option 1
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a step by step guide on how to create a basic PTP link using Ubiquiti airOS devices. This guide can be used on the following Ubiquiti AirMAX devices. Nanostation, Bullets, AirBridge, Nanobeam, NanoBridge to name a few. Please review …
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question