Guest networks in ACS 5.1

Has any one added a guest network (wireless) within ACS 5.1 Have been looking at docs provided but am have=ing a difficult time getting it started. Any suggestions would be helpful

There is not report you can run in order to show which users have access to which devices, your best bet is to take a screenshot of your authorization policy which shows the permissions. Then take a screenshot of all the users that are present in the user groups, and then another screenshot the network device group of the firewalls.
Hope that helps,
Tarik Admani
*Please rate helpful posts*

Similar Messages

Wired WebAuth only with NAC Guest Server (No ACS)

Ok, I have been fighting this for two days now. I want to use the webauth function on some of our Cisco 3750Gs ver
12.2(55)SE5 for guest access. I'm trying to use our NAC Guest Server ver: 2.0.3 as the backend portal and Radius server. We do not have ACS or any of the other components of ISE or NAC. I think the issue is the NGS server is not sending the d(ACL) back to switch. Guest work work fine from our WLCs.
switch debug: No Attributes in swtich debug
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): Config NAS IP: 199.46.201.26
Mar 22 12:56:00.448 CDT: RADIUS/ENCODE(0000030C): acct_session_id: 1012
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): sending
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): Send Access-Request to 10.199.33.20:1812 id 1645/19, len 177
Mar 22 12:56:00.448 CDT: RADIUS: authenticator 99 95 59 55 09 A9 D9 E1 - 2B 01 90 36 1B 8A 41 92
Mar 22 12:56:00.448 CDT: RADIUS: User-Name           [1]   20 "[email protected]"
Mar 22 12:56:00.448 CDT: RADIUS: User-Password       [2]   18 *
Mar 22 12:56:00.448 CDT: RADIUS: Framed-IP-Address   [8]   6   199.46.201.231
Mar 22 12:56:00.448 CDT: RADIUS: Service-Type        [6]   6   Outbound                  [5]
Mar 22 12:56:00.448 CDT: RADIUS: Message-Authenticato[80] 18
Mar 22 12:56:00.448 CDT: RADIUS:   A2 57 B5 F2 A6 FB 46 71 D0 EA 26 54 95 90 F4 D0             [ WFq&T]
Mar 22 12:56:00.448 CDT: RADIUS: Vendor, Cisco       [26] 49
Mar 22 12:56:00.448 CDT: RADIUS:   Cisco AVpair       [1]   43 "audit-session-id=C72EC91A000002FC0A6CD698"
Mar 22 12:56:00.448 CDT: RADIUS: NAS-Port-Type       [61] 6   Ethernet                  [15]
Mar 22 12:56:00.448 CDT: RADIUS: NAS-Port            [5]   6   50106
Mar 22 12:56:00.448 CDT: RADIUS: NAS-Port-Id         [87] 22 "GigabitEthernet1/0/6"
Mar 22 12:56:00.448 CDT: RADIUS: NAS-IP-Address      [4]   6   199.46.201.26
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): Started 5 sec timeout
Mar 22 12:56:01.454 CDT: RADIUS: Received from id 1645/19 10.199.33.20:1812, Access-Reject, len 20
Mar 22 12:56:01.454 CDT: RADIUS: authenticator 92 98 05 84 6E 4B CF DD - B5 D7 90 25 10 59 7B E7
Mar 22 12:56:01.454 CDT: RADIUS(0000030C): Received from id 1645/19
NGS log:
rad_recv: Access-Request packet from host 199.46.201.26 port 1645, id=19, length=177
    User-Name = "[email protected]"
    User-Password = "5rRmpPt9"
    Framed-IP-Address = 199.46.201.231
    Service-Type = Outbound-User
    Message-Authenticator = 0xa257b5f2a6fb4671d0ea26549590f4d0
    Cisco-AVPair = "audit-session-id=C72EC91A000002FC0A6CD698"
    NAS-Port-Type = Ethernet
    NAS-Port = 50106
    NAS-Port-Id = "GigabitEthernet1/0/6"
    NAS-IP-Address = 199.46.201.26
+- entering group authorize {...}
[radius-user-auth]     expand: %{User-Name} -> [email protected]
[radius-user-auth]     expand: %{User-Password} -> 5rRmpPt9
[radius-user-auth]     expand: %{NAS-IP-Address} -> 199.46.201.26
[radius-user-auth]     expand: %{Calling-Station-Id} ->
Exec-Program output:                          Note: no attributes here
Exec-Program: returned: 1
++[radius-user-auth] returns reject
Delaying reject of request 12 for 1 seconds
Going to the next request
Waking up in 0.6 seconds.
Similar debug from NGS but auth request from WLC: See attributes are sent to wlc although not needed
rad_recv: Access-Request packet from host 10.100.16.100 port 32770, id=22, length=152
    User-Name = "[email protected]"
    User-Password = "5rRmpPt9"
    Service-Type = Login-User
    NAS-IP-Address = 10.100.16.100
    NAS-Port = 13
    NAS-Identifier = "ICTWLC01"
    NAS-Port-Type = Ethernet
    Airespace-Wlan-Id = 514
    Calling-Station-Id = "10.198.12.211"
    Called-Station-Id = "10.100.16.100"
    Message-Authenticator = 0xc9383e767f0c228a2b8a0ece7069f366
+- entering group authorize {...}
[radius-user-auth]     expand: %{User-Name} -> [email protected]
[radius-user-auth]     expand: %{User-Password} -> 5rRmpPt9
[radius-user-auth]     expand: %{NAS-IP-Address} -> 10.100.16.100
[radius-user-auth]     expand: %{Calling-Station-Id} -> 10.198.12.211
Exec-Program output: Session-Timeout := 20002004, cisco-AVPair += priv-lvl=15, cisco-AVPair += auth-proxy:proxyacl#1=permit ip any any
Exec-Program-Wait: plaintext: Session-Timeout := 20002004, cisco-AVPair += priv-lvl=15, cisco-AVPair += auth-proxy:proxyacl#1=permit ip any any
Exec-Program: returned: 0
++[radius-user-auth] returns ok
[files] users: Matched entry DEFAULT at line 1
++[files] returns ok
Found Auth-Type = Accept
Auth-Type = Accept, accepting the user
+- entering group post-auth {...}
[sql]     expand: %{User-Name} -> [email protected]
[sql] sql_set_user escaped user --> '[email protected]'
[sql]     expand: %{User-Password} -> 5rRmpPt9
[sql]     expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', NOW()) -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('[email protected]', '5rRmpPt9', 'Access-Accept', NOW())
rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('[email protected]', '5rRmpPt9', 'Access-Accept', NOW())
rlm_sql (sql): Reserving sql socket id: 12
rlm_sql_postgresql: Status: PGRES_COMMAND_OK
rlm_sql_postgresql: query affected rows = 1
rlm_sql (sql): Released sql socket id: 12
++[sql] returns ok
Sending Access-Accept of id 22 to 10.100.16.100 port 32770
Finished request 4.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 10.100.16.100 port 32770, id=30, length=170
config:
aaa new-model
aaa authentication login default group radius
aaa authentication login console group tacacs+ line
aaa authentication enable default group tacacs+ enable
aaa authorization console
aaa authorization exec default group tacacs+ none
aaa authorization auth-proxy default group radius
aaa accounting auth-proxy default start-stop group radius
aaa accounting exec default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
ip device tracking
ip auth-proxy auth-proxy-banner http ^C HawkerBeechcraft Guest Network ^C
ip auth-proxy proxy http login expired page file flash:expired.html
ip auth-proxy proxy http login page file flash:login.html
ip auth-proxy proxy http success page file flash:success.html
ip auth-proxy proxy http failure page file flash:failed.html
ip admission auth-proxy-banner http ^C HawkerBeechcraft Guest Network ^C
ip admission proxy http login expired page file flash:expired.html
ip admission proxy http login page file flash:login.html
ip admission proxy http success page file flash:success.html
ip admission proxy http failure page file flash:failed.html
ip admission name web-auth-guest proxy http inactivity-time 60
dot1x system-auth-control
identity policy FAILOPEN
access-group PERMIT
interface GigabitEthernet1/0/6
switchport access vlan 301
switchport mode access
ip access-group pre-webauth-guest in
no logging event link-status
srr-queue bandwidth share 10 10 60 20
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust dscp
no snmp trap link-status
auto qos voip cisco-phone
spanning-tree portfast
spanning-tree bpduguard enable
service-policy input AutoQoS-Police-CiscoPhone
ip admission web-auth-guest
ip http server
ip http secure-server
ip access-list extended PERMIT
permit ip any any
ip access-list extended pre-webauth-guest
permit udp any any eq bootps
permit udp any any eq domain
permit tcp any host 10.199.33.20 eq 8443
permit tcp any host 10.199.33.21 eq 8443
permit tcp any host 10.100.255.90 eq 8443
deny   ip any any log
ip radius source-interface Vlan301
radius-server attribute 8 include-in-access-req
radius-server dead-criteria tries 2
radius-server host 10.199.33.20 auth-port 1812 acct-port 1813 key 7 022E5C782C130A74586F1C0D0D
radius-server vsa send authentication
I get the login and AUP page then the failed page... I never see the priv-lvl 15 or the proxyacl? How do I do this with Guest server only?
Help!

Without the ACS, only with the NAC guest is possible?
They can send me sample configuration?

Easiest method to block employees from Guest network?

We have WCS and several WLCs (WISMv1, 5508, 4402) all running the 7.0.240.0 code. The "Guest" SSID is "garden-walled" from the corp LANs. We used to have web-auth page that required ID / PW.   This became unreasonable as IT Dept was getting requests at all hours for immediate access from guest / resident family memebrs. So we changed the web-auth to remove the the ID / PW and just display corp policy and have to hit a "continue" button to gain access to Guest SSID. Healthcare staff on the floor are not tech-savvy enough to want to use or perform Hotel Ambassador functions.
The issue now is that we have employees with smartphones, tablets and even personal laptops conecting the Guest SSID. Sr. Mgt wants to find a way to stop the abuse.
I do not believe there is any perfect solution to prevent employees from gaining access, but have been asked to find a manageable method to deter most employees from connecting to the Guest network.   Looked at seing up MAC filtering in WCS, it seems that you have to enter MACs that you *allow* on to the network - by default, other MACs are blocked. I would rather have the template block the MACs listed in the csv file and allow access as the default..
We have several SSIDs. Our corporate SSID uses 802.1x and we use Microsoft Server 2012 Network Policy Server (RADIUS) to pass user ID / PW to our AD for authentication. We do not have Cisco ACS. I am not sure if integrating RADIUS is the answer here either.
I have had some webex sessions on ISE, NCS, and Prime infrastructure. We are only interested at the moment to monitor / control access to Guest. I have been told that ISE will have "sponsorship" functionality added in soon -- where user fills out info and ID / PW is sent via text or email to a cell phone or other device.
Any ideas??
TIA -- Perry

Steve,
The employees don't use / need any credentials for the Guest. The nurse staff / aides have balked at performing what they see as IT responsibilities.   I can actually understand their point....their job is to provide care to the residents.
IT can't realistically respond to requests at all hours for access to Guest.
One thought was to see if we can require a name to be on the web-auth form that we can upload and record the corresponding MAC. The name is not verified against AD or anything -- more to track and see if the MAC associated "moves" across the network -- which would signal that it is likely an employee using a smartphone.
But we still need a way to specifically block a MAC while allowing the default permit in WCS. As I mentoned earlier, the default seems to be block MACs and permit specific MACs in the list....
Perry

I cannot add a Wi-Fi guest network. Gone to Utilities Airport Utilities and all get is an image/browser of my Airport Extreme. Looking for the browser which has the title Wireless but cannot find anywhere. I need help?

I cannot add a Wi-Fi guest network. Gone to Utilities>Airport Utilities and all I get is an image/browser of my Airport Extreme. Looking for the browser window which has the title Wireless but cannot find anywhere. What am I doing wrong?

Open AirPort Utility. The first screen looks something like this:
Click on the AirPort Extreme and another screen will appear. Click Edit, then the window with the Wireless tab will appear.
If you do not see these screens, you will need to start over and configure your AirPort again.

Airport Extreme 802.11AC + 5th Gen and guest network access

I have the current gen Airport Extreme 802.11AC with a 5th Gen extending the network. With this setup, I am unable to login using our guest network setup. I have tried using guest network with a password and one without but its the same results. When a guest logins, it stuck attempting to login with no error messages.
So is it possible to have this configuration and still have guest network access?

Please review what I said originally.......that the guest network function on the AirPort Extreme is designed to work with a simple modem......so the AirPort acts as the main router for the network..
Another way of saying the same thing is that the AirPort needs to be "in charge" of your network for the guest feature to work correctly. The AirPort cannot be in charge if it is connected to another device that is already configured to be the main router on your network.....your Actiontec modem/router.
The Actiontec device combines the functions of a separate modem and a separate router in one package. This type of device is known as a modem/router, or also known as a gateway.
Some folks call a modem/router or a gateway......a modem. So, things can get confusing.
I do not know if it is possible for the Actiontec device that you have to be configured to act as a simple modem.....so the routing functions of the device are completely turned off. (Turning off the wireless on the Actiotec does not turn off the routing function).
If you turn off the wireless on the Actionec, it becomes a modem and a wired router. And that wired router is still in charge of your network.
The guest network feature will not work correctly unless the AirPort is in charge of your network.
My suggestion was for you to ask your Internet Service Provider (ISP), if they could supply you with a simple modem. That is all that you need. You don't need two routers....and the Actiontec that you have now is not allowing the guest feature to work correctly.

Cascading EA4500s and Guest Network access

Hi, I hope esomone can help me here. I've got two EA4500 routers connected via ethernet. The primary router has DHCP enabled and the secondary has it disabled. IP address of primary is 192.168.1.1 and the secondary is 192.168.1.2.
I have set up guest access on both routers however only the primary router allows users to connect. When out of range of the primary router but in range of the secondary router the network is visible but when you try to connect to it, it only gives limited or no connectivity message and can't connect to the internet.
Is it possible for the guest network access to follow the same pattern as the secure network, i.e. the same network throughout the house?
Regards
Jon

Cascading two routers should have correct parameters set. For instance, the Ethernet port of the secondary router should be connected to the ethernet port of the primary one, and the DHCP should be disabled on the second router. The ip address you've set are correct for the both routers. This thing shoud be done if the connection is LAN to LAN.
By the way there are two types of cascading: Click here for info!
For the Guest Network:
Guest Network would only work if the the DHCP is enabled on your router. It means to say that on the type of setup you're doing which is LAN to LAN (DHCP disabled on the second router), Guest network would not work on the secondary router. If the connection is LAN to WAN, then both of the router should have Guest Network working.

How do I configure Guest network to access ethernet wired printer?

I have a wired/wireless network with a new dual band AEBS. The AEBS is connected to a Cisco router, which in turn sends it's connections to various wall-plates in our home. One HP 4110 printer is wired via it's ethernet port, one Mac Mini (OS 10.6.2) is hard wired also. The dual band AEBS 5 GHz network is used for our newer laptops, and the 2.4 GHz network is used for a G3 Firewire PowerBook (now don't make fun... it was the best there was at one time) running OS 10.4.11.
The PowerBook cannot access the printer that is hard wired via ethernet cable to the network. How do I get the PowerBook on the "Guest" network to access the printer?
I tried searching these discussions, but can't find an answer to my specific issue. Any help is appreciated.

Since you have a simultaneous dual-band AEBS, why not connect your PowerBook G3 to the non-Guest 2.4 GHz network created?
Can I take an AEBS that is a couple of years older (I have a couple of the flying saucers around here somewhere), wire that to an available ethernet port on the LAN, and then connect the older PowerBook G3 to that older AEBS wirelessly?
Sure
If so, will that arrangement slow down the entire system?
No
If that won't work, and I connect the PowerBook G3 directly to an ethernet port, will that slow down the other wireless computers?
Yes you can connect your PowerBook G3 via Ethernet. That would have no effect on the wireless computers.

How do I add a guest network to existing airport extreme configuration?

I have an existing Airport Extreme configuation in my home Wifi network and I want to add a guest access point. When I open the recently updated airport utilities, the screen no longer looks the way it used to, with the side bar on the left and my devices listed there for me to select (I also have an Airport Express). I used to be able to select the Airport Extreme from the left side bar, then hit continue to change any settings. Well now, since it updated, the screen looks different, with internet at the top, pointing to the Airport Extreme, then the Airport Express. When I select the Airport Extreme, it no longer gives me the option to change the settings for it, which is where my problem lies! Any help? I know it's probably something very simple that I am missing, but I'm at a loss.

Why would I download a lower version of AirPort Utility?
To gain more functionality.....since AirPort Utility 6.0 is otherwise known as "AirPort Utility Lite" on the forums. It's a "first try" for Apple with a new look. While it does look nice, it has been downgraded as far as the features are concerned.
For example, if you open AirPort Utility 5.6 and click on the AirPort Extreme on the left, your Generation version will be displayed on the right side of the page. There are many more advanced settings available in AirPort Utility 5.6 as well...that are not available on 6.0.
But, you don't have to install AirPort Utility 5.6 if you don't want to. I suggested it because it offers more features and will also look exactly the same as the AirPort Utility that you have used previously.
If your AirPort Extreme is in Bridge Mode, this indicates that you have another device...probably a modem/router....which is acting as the main router on your network. Bridge Mode is the correct setting for the AirPort Extreme in this case.
If you can post back with the make and model number of your "modem", we can check to confirm.
Unfortunately, the Guest Network cannot be enabled unless you configure the AirPort Extreme to be the "main" router on your network, which is likely not possible. If you try to configure the AirPort Exteme otherwise, you will receive error messages and the network will not function correctly.

How do to set up time limits on a guest network

I have a new generation Airport Time Capsule and I have set up a Guest Network for my kids but I would like to set up time limits on the Guest Network also, is there a way to do it?

It is not possible to set up specific time limits for the Guest Network as a whole, but it is possible to set up individual time limits for each device that will be connecting to the Guest Network.....and, also the main network for that matter.
If you can provide us with some more specifics on what you are trying to accomplish, how many devices will be involved, etc.......that will help us craft our answer to provide accurate information.
Meanwhile, if you want to take a look at the general settings in Timed Access....
Open Macintosh HD > Applications > Utilities > AirPort Utility
Click on the Time Capsule icon, then click Edit
Click the Network tab at the top of the screen
Enter a check mark in the box next to Enable Timed Access
Click on the Timed Access button
Click Cancel to avoid making any changes to your current setup

Hi. Does anyone know how to delete my guest network from the list of network choices that everyone in the neighborhood sees when picking a network? Followed helpful suggestions on this site to delete the netwk but it still appears. Appreciate any help!

Hi. I'm trying to make my guest network disappear from the list of network choices that appears to everyone in the neighborhood. Even though I followed the great suggestions on how to delete the network, it's still appearing in the list that everyone sees. It has my name and would prefer to get rid of it.
Please help! Many thanks!

Thank you for not only the tip but also especially the research showing that for anybody other that those using Wi-Fi for the first time the network wouldn't disappear. I wanted it to disappear for everyone so.....I finally solved it by resetting the Airport Extreme to the factory settings and starting over from scratch! It worked! Yay!!!!!
So, for everyone that has had this problem (and I've read many of the same complaints in different places on the Internet), you must go into Airport Utility and check the box stating that you want to reset it to the factory settings. Do not do it with a paper clip and the reset button on the box; I tried that first and it did not work. You must reset it via the Airport Utility. Then just start over and you will have the choice to NOT check the box to Enable Guests. If you want to enable guests, just be sure not to use your name or you're back to the same problem. Apple is so great with everything...wouldn't it have been so easy for them to just put this in the manual somewhere????? Thanks for all your help. Hope this helps others!

How can I delete the guest network from my airport. It was fine until the last update. It says my whole name's guest network which I do not want everyone seeing. There is no guest network setting in my airport utility.

How can I delete the guest network from my airport. It was not showing up until I recently upgraded the airport. It now says my name's guest network and I don't like my name showing on the available network list! I am using a Verizon wireless modem with the wireless feature off.

Open AirPort Utility, go to the Wireless tab and remove the check from the guest network check box.

How can I create a guest network on an airport extreme that connects wirelessly with a Timecapsule

I have a Timecapsule in one place of our house, that is connected to Internet. I need to extend the range of my network: 1. my private network needs to get to a remote location to make connection with speakers (Itunes). for this I need to first extend the range of my private network, because the speakers are too far away from the TC. 2. I need to set up a guest network, but at quite some distance from my TC, in an other part of the house, too far away from the TC (so a guest network on the TC won't do).
For this, upon advice from an apple store, I bought an airport extreme, which I have placed on a location where it can connect to the TC, to extend the private network. On the location of the speakers, I have an aiport express (connecting to the extreme), to play music from Itunes. The setup at this moment is: TC makes connection to internet, and broadcasts a private network. Extreme connects to this private network, and broadcasts it further to the Airport express, that captures it and plays the music. I would now like to create a guest network on the Airport Extreme, while this Extreme keeps on connecting to the private network of the TC and keeps on broadcasting it to the Express. Is this possible? How can I do this? Thanks for the help !

I would now like to create a guest network on the Airport Extreme, while this Extreme keeps on connecting to the private network of the TC and keeps on broadcasting it to the Express. Is this possible?
Unfortunately, the "main" router...your TC in this case....is the only device that can create a Guest Network, assuming that the TC is connected to a simple modem.
Unfortunately again, the Guest Network cannot be extended. Your only real option here is to create a Guest Network on the TC and hope that it will have sufficient coverage for your needs.

Using Airport Express on separate subnet to make isolated Guest Network?

Hi. I've done a search here, I've tried setting this up at my house but haven't figured it out yet.
Friends have Verizon FiOS service. They're using the provided modem as the ethernet router and it is handing out DHCP addresses, and for a number of reasons including their home theater, on demand use, etc., they want to keep the FiOS modem as the router, not an Apple product.
We're using an Airport Extreme and a Time Capsule both in bridge mode to distribute the wireless network and everything works fine. They'd like to add an isolated, unencrypted Guest Network. I know we can't use the Extreme's Guest tab because we're in bridge mode.
But we do have a new Airport Express. It seems like there would be a way to set up a Double NAT on a different subnet and give guest users access to the internet but not to computers, shared volumes, printers, and everything else on the primary, encrypted network.
Is there a way to do this or will every address coming from the FiOS router be on the same subnet? Are there any other horrible consequences from doing this, i.e., the primary network will still operate fine?
If the DHCP range coming from the FiOS router is 192.168.15.001 to 192.168.15.199, do I set the Airport Express IP address manually? To what?
To eliminate the possibility of duplicate IP addresses would you have the Airport Express hand out a small range of IPs on a completely different network area, like 10.0.1.1?
Any other suggestions? Thank you.

I was trying to create a primary and guest network division after the router... such as an unusual configuration in the AEBSn after the FiOS router.
At my home I have my cable modem connected to an AEBSn, which is doing my network's routing. But I didn't set a Guest Network on this AEBSn. I am trying to set up a discrete Guest Network downline from this router. (Which would simulate my friend's installation where they're using a FiOS modem/router all in one and we want to create a discrete Guest Network after that.)
But as I guess you've been patiently trying to get through to me, Bob, whatever outlying separation you may be able to create seems to get put back together at the main router.
For example, today I connected a second AEBSn ("AEBSn Guest") to the LAN port of my primary AEBSn router. I set the AEBSn Guest to create a wireless network, and I set that to be a closed encrypted network called "Test," and I enabled unencrypted Guest Networking as usual and told the AEBSn to ignore the Double NAT error.
With this configuration I am able to get on the open Guest SSID, and internet connection is normal. Between the Guest and the primary encrypted network, printing is broken, iPhoto sharing is broken, and so on, but I still see shared volumes and can log in with authentication.
So I can see why a solution to this may have been elusive.
I don't know much about cable TV's subscription services but I took a peek at the set up pages of the Verizon FiOS router and noted there was a lot going on there. Lots of ethernet and cable IP addresses to Set Top Boxes, etc. Not sure if all this could be recreated within the administration of the Airport Extreme, but I am hesitant to risk messing up the Comcast services which are presently working well.
In terms of zooming out to the big picture... when I invite guests to share my internet service, they're usually doing email and web browsing for the weekend but at the end of their stay they want to print their boarding passes... so despite setting up a guest network I might end up giving them access to the main network anyway.
Thanks for the help, Bob.

Can I set up a default website for my guest network on an EA3500?

Just got a new EA3500, and plan to use its guest network feature to allow Internet access but not access to my LAN. Wondering if I can set it up so that users on the guest network bring up a particular website when they open their browser. I didn't see anything about this in the user's guide or in the forums.

That's actually how Guest Access feature works. You can share internet to your guest/visitors without giving them access to your local network. You may configure the Guest Access settings on the router using Linksys Smart Wifi through the local access interface; check this site for the instructions, http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=b509a1805dd6416ebb0e35a7e5a58937_Configuring_Guest...
Added Info:
Guest Network Frequently Asked Questions
http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=f35bd58fda4148929ac482f3c7968e04_Guest_Network_Fre...

How to get rid of the guest network on E1000

Is there a way to get rid of the guest network on a E1000 or is it part of the setup.

Hello Burns1214 ,
I posted an answer here http://homecommunity.cisco.com/t5/Wireless-Routers/Enable-quot-Guest-Access-quot-on-E1000-Router/m-p.... You can only disable it thru Cisco Connect software.

Guest networks in ACS 5.1

Similar Messages

Maybe you are looking for