I'm receiving more requests for a dedicated guest WIFI around the office for customers. I'm concerned about offering it securely. I've seen some Cisco documents that just refer to setting up a guest WIFI VLAN, but I question whether or not more should be done. Are there some best practices for doing so?

I'm thinking about setting up a VRF for the guest WIFI VLAN. Also, wondering if some form of authentication should be required to deter non-customers from accessing the WIFI from outside the building? Obviously, something simple, since we'd want it to be accessible to customers and have a low administration overhead for IT.

I've simply added another VLAN to my network where I have another SSID(just for guest) attached to it. I've created ACLs to limit the traffic from getting to my production network.

I agree with zippy. That is what we are doing too.
We are using vlan 901 for our guest wireless access.

You using LWAPs?

_________________
http://blog.alwaysthenetwork.com

Yes

I agree with Zippy and rolon. ACL and a different vlan. We use 800 for our guest wireless.

A controller in a DMZ as the mobility anchor. This is the cisco approved way of doing this.
http://www.cisco.com/en/US/docs/wireles ... mobil.html



Sent from my iPhone using Tapatalk

we use this, with a simple WPA/PSK for the guest SSID