I'm receiving more requests for a dedicated guest WIFI around the office for customers. I'm concerned about offering it securely. I've seen some Cisco documents that just refer to setting up a guest WIFI VLAN, but I question whether or not more should be done. Are there some best practices for doing so?
I'm thinking about setting up a VRF for the guest WIFI VLAN. Also, wondering if some form of authentication should be required to deter non-customers from accessing the WIFI from outside the building? Obviously, something simple, since we'd want it to be accessible to customers and have a low administration overhead for IT.