Hello everyone,

I have a wireless network managed by a Cisco 5508 controller. There are 6 access points attached on a Cisco 2960 switch and the switch is connected to the controller.

My supervisor asked me to rent a second line (an ADSL) and through that line he wants our visitors to have internet connection.

I am pretty confused on how to do that. Any help would be great.

As I said, currently access points are connected to a 2960 switch. On that switch there are also all our clients. Wireless and wired network is on the same VLAN. Switch is connected on a firewall and on the wireless controller and after the firewall there is the router.

So, where hould I put my new line? An what kind of configuration should I do?

Thank you all!

you need to do a separate VLAN for guest wireless and route that network out the other internet connection.

Hello paadams and thanks for the reply.

This is the first time I am trying to do something like that, so any further detail will be perfect for me. OK, all the existing computers are working on VLAN 30 and of course the default gateway is the 30.1

I created a second VLAN , the VLAN5 and I want to connect the switch with the new adsl router. What ports do I have to connect? I mean , I must connect one ethernet port of the router with one ethernet port of the switch? And after that?

Thanks in advance for your help

Is this connect to your core switch? If it's connected to the 2960, you probably can't do what I'm thinking as it's not a Layer 3 switch. If the 2960 is your core, you need to upgrade in my opinion.

Can you draw out a diagram of all the devices involved?

Yeap, that's my core switch unfortunately.

draw out your setup. Can just be something simple in mspaint as long as it's clear.

What you would do is create your guest wireless VLAN5, set a switchport up with vlan 5 and connect to the DSL modem. The DSL modem will be the default gateway for VLAN5 (For example, 192.168.0.1)
Then make sure VLAN5 is added to the trunk to the 5508. If you're not using lag, just add another port with VLAN5 and connect it to the 5508
On the 5508 you will need to add an interface, tag it with VLAN5 (or select the port if not in lag) and give it an address like 192.168.0.2.
Use that interface for your Guest Wireless network.

If its for your guest and you dont need them to see anything on your VLAN 30 network you don't need to route between, your DSL can route the traffic, just tag the port on the 2960 that its plugged into and what Macubergeek said about interface on 5508.

tell your boss you could do this without the secondary dsl, just vlan the guest and route it to a subinterface on the firewall, use a public dns for the network and you should be good. you will need to configure ACLs if you need to deny traffic at the firewall.

depending on how old your 2960 is, i think they have a plus that can do L3 on up to 8 ports. but i cant rememeber.

^^ This.

We always recommend having a separate DSL/Cable connection for guest wireless for a few reasons. It's a huge headache to try and throttle bandwidth on the guest wireless (QoS on the WLC is not sufficient). It also makes management easier as you don't have to worry about routing that vlan at all on the core; just keep it layer 2 all the way to the device that the ISP gives you.