Aironet, Access Points, Client Adapters and software, Mobile and Outdoor Wireless, Antennas.
thecompnerd
Junior Member
Posts:
95
Joined:
Wed Nov 11, 2009 1:22 pm
Certs:
CCNA Security, CCNA, A+, Network+, MCDST

Setting Up Guest WIFI - Suggestions

Tue Mar 15, 2011 10:32 am

I'm receiving more requests for a dedicated guest WIFI around the office for customers. I'm concerned about offering it securely. I've seen some Cisco documents that just refer to setting up a guest WIFI VLAN, but I question whether or not more should be done. Are there some best practices for doing so?

I'm thinking about setting up a VRF for the guest WIFI VLAN. Also, wondering if some form of authentication should be required to deter non-customers from accessing the WIFI from outside the building? Obviously, something simple, since we'd want it to be accessible to customers and have a low administration overhead for IT.

User avatar
ZiPPy
Ultimate Member
Posts:
509
Joined:
Mon Aug 24, 2009 3:04 pm
Certs:
CCNA

Re: Setting Up Guest WIFI - Suggestions

Tue Mar 15, 2011 11:05 am

I've simply added another VLAN to my network where I have another SSID(just for guest) attached to it. I've created ACLs to limit the traffic from getting to my production network.

User avatar
rolon
Member
Posts:
199
Joined:
Tue May 26, 2009 1:39 pm
Certs:
CCENT

Re: Setting Up Guest WIFI - Suggestions

Tue Mar 15, 2011 1:02 pm

I agree with zippy. That is what we are doing too.
We are using vlan 901 for our guest wireless access.

User avatar
Vito_Corleone
Moderator
Posts:
9850
Joined:
Mon Apr 07, 2008 10:38 am
Certs:
CCNP RS, CCNP DC, CCDP, CCIP

Re: Setting Up Guest WIFI - Suggestions

Tue Mar 15, 2011 1:05 pm

You using LWAPs?
http://blog.alwaysthenetwork.com

User avatar
rolon
Member
Posts:
199
Joined:
Tue May 26, 2009 1:39 pm
Certs:
CCENT

Re: Setting Up Guest WIFI - Suggestions

Tue Mar 15, 2011 1:10 pm

Yes

User avatar
titaniumpower
Member
Posts:
205
Joined:
Thu Nov 18, 2010 1:40 pm
Certs:
A+, Network+

Re: Setting Up Guest WIFI - Suggestions

Wed Mar 16, 2011 11:59 am

rolon wrote:I agree with zippy. That is what we are doing too.
We are using vlan 901 for our guest wireless access.


I agree with Zippy and rolon. ACL and a different vlan. We use 800 for our guest wireless.

User avatar
WiPoint
Junior Member
Posts:
52
Joined:
Tue Mar 01, 2011 8:36 pm

Setting Up Guest WIFI - Suggestions

Thu Mar 17, 2011 4:45 am

A controller in a DMZ as the mobility anchor. This is the cisco approved way of doing this.
http://www.cisco.com/en/US/docs/wireles ... mobil.html



Sent from my iPhone using Tapatalk

User avatar
dude_
Senior Member
Posts:
473
Joined:
Mon Apr 12, 2010 11:14 am
Certs:
CCNP

Re: Setting Up Guest WIFI - Suggestions

Mon Mar 21, 2011 8:55 am

thecompnerd wrote:I'm thinking about setting up a VRF for the guest WIFI VLAN.

we use this, with a simple WPA/PSK for the guest SSID

'

Return to Cisco Wireless

Who is online

Users browsing this forum: No registered users and 5 guests