Solved

Guest Wireless Access

Posted on 2015-01-30
7
241 Views
Last Modified: 2015-04-09
We had been using a Linksys Smart Wi-Fi E4200 successfully as a router and for wireless access, both for our employees and for guest access for our visitors...

We now have a Cisco ASA (non-wireless) router in place, and we're using the Linksys for wireless access... HOWEVER, we cannot get the GUEST access to work.  We *can* connect using the Guest Access feature, but we can't get to the internet using it.  

Linksys tells me that this is not possible... that the only way to use the *Guest* access feature of this device is to make it our "main" router... which I cannot do.  (Out of my control.)

Does this sound logical?  I must be missing something obvious.  How can we provide wireless guest access and still use the Cisco ASA as our router?
0
Comment
Question by:K A
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 46

Expert Comment

by:Craig Beck
ID: 40580295
What the Linksys router does is push both the private and guest networks out through the same WAN port.  That's ok as it separates the guests from the secure side of your network.

However, there's no way to differentiate guests from secure users once their traffic exits the WAN port as the router will NAT all traffic that goes out of the WAN port.  The ASA just sees a load of traffic coming from the Linksys router so it's all effectively the same.

For this to work properly you'd need to dump the Linksys router and use a proper AP that can do 802.1Q (VLANs) and multiple SSIDs.
0
 
LVL 26

Assisted Solution

by:Fred Marshall
Fred Marshall earned 75 total points
ID: 40580566
What I believe you may have done is to connect the AP LAN-LAN.  
This is a typical configuration when there's another router as internet gateway.

Here is what I imagine that you have:

Cisco <> Linksys private Ethernet LAN port <> private LAN wired and wireless
                Linksys guest wireless "ports" which connect to each other maybe but there's no WAN connection to be used.

What craigbeck says is correct: the Linksys router connects both the private and guest networks via NAT to the WAN port while keeping the two networks separate otherwise.
Without the WAN port connected to anything, you won't get internet connection to the guest wireless network because it's normal path isn't there.

Another way to look at it is:
- the private LAN is one of two VLANs.  This one has Ethernet ports.
- the guest LAN is one of the two VLANs.  This one has no Ethernet ports.  It's only intended for wireless connections.
- the two VLANS connect to the WAN port / isolated from one another (with NAT).

So, if you don't connect the WAN port then there's no upstream connectivity.
The private LAN connects to the inside of the Cisco ASA router and gets internet access that way.
The guest LAN is just "floating" re: internet access.
Simple-Model-of-a-Wireless-Router-with-G
0
 

Author Comment

by:K A
ID: 40612836
Thank you both for your advice so far...

We got pulled away from this for a few days, but it will surface tomorrow.  We looked hard for an 802.1Q (VLAN) device with multiple SSIDs locally via retail, but couldn't find one.  Will query our distributors tomorrow and will be able to report back.
0
Webinar June 1st - Attacking Ransomware  

The global cyberattack that corrupted hundreds of thousands of computer systems on May 12th had a face, name, & price tag that we’ve seen all too often in recent years: Ransomware. With the stakes – and costs – of a ransomware attack higher than ever, is your business prepared ?

 
LVL 46

Expert Comment

by:Craig Beck
ID: 40613163
Get yourself a Cisco 1602.
0
 

Author Comment

by:K A
ID: 40615447
Thanks, craigbeck, but we don't see any reference to 802.1Q, VLANS, or multiple SSIDs on the Cisco 1602 spec sheets... nor any of the Aironet products, for that matter.  Does Cisco use different names for those technologies?
0
 
LVL 46

Accepted Solution

by:
Craig Beck earned 425 total points
ID: 40615479
No, they just dont mention it for some bizarre reason but take it from me - all Cisco Aironet APs (1600, 2600, 3600, 1700, 2700, 3700, 1500, 1100, 1200) do 802.1Q and multiple SSIDs.  I've installed literally tens of thousands of them :-)
0
 

Author Closing Comment

by:K A
ID: 40715046
Thank you very much.
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

With the purchase of CloudCommand by Comcast customers are left in a bind as subscriptions expire and render the AP's disabled. The following will explain how to flash your Ubiquiti AP's with CloudCommand firmware back to Ubiquiti firmware. HOWTO…
Working settings for French ISP Orange "Prêt à Surfer" SIM cards for data connections only. Can't be found anywhere else !
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question