Wireless Guest Network Setup

Hi Guys,
We have a wireless network using Cisco infrastructure (WLC 4402, WCS, thin clinet APs).
We also have guest wireless network and we are using a third party aplication for web authentication.
I am trying to setup wireless guest network using WLC and WCS and wolud like to remove the third party application.
I really don't know where to start. I am expecting a complete step by step kind of a information or atleast some use full hints and links.
Thanks in advance.

Hi Sohail,
here is the step by step procedure to configure the Web auth using cisco WLC..
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml
Lemme know if this answered ur question!!
Regards
Surendra

Similar Messages

Wired + Private Wireless + Guest Networks

I'm attempting to setup a configuration that I don't seem able to get correct. I have a small wired network at my church with a file server and a couple of dozen users, some of which have laptops and would like to be able to roam wirelessly through the building. In addition, I would like to have an unsecured wireless guest network for visitors which provides access to the internet and does not have access to the file server.
The specifics are a wired 192.168.1.xxx network with a NAT'd DSL modem/router. I have 4 Airport Extreme dual radio N devices. I've tried setting the first Airport Extreme unit to shared IP, the only setting that allows me to also use a guest network, with a private SSID handing out 172.0.xxx.xxx addresses and a guest network handing out 10.0.xxx.xxx addresses. It seems logical to me that I would want to used bridged mode to allow my private wireless uses to see the server, but the Airport Extreme tells me I can not use a guest network with that setting.
With this setup, I can not get to my server by name, but I can get to by IP address. I guess that's not a huge problem since I have such a small number of users, I can add the server IP address to a hosts file on each client. What bothers me most is that I can get to the server IP from the guest network as well as the private network. Am I missing something?
My second point of confusion is when I try to configure the other 3 Airport Extremes to extend the network. The configuration tools asks me which wireless network I want to extend, and allows me to choose only the private network OR the guest network. I thought it should be able to extend both networks simultaneously. Am I mistaken on this as well?
I'm certain I've left out plenty of information you may need to assist so please ask, I will gather what ever I can. Thanks in advance.

Hello muellgre. Welcome to the Apple Discussions!
Unfortunately, Apple does not provide you with very many options when it comes to their Guest network feature. It is basically designed to work with a single AirPort/Time Capsule router in your network configuration.
As you have found out, it will only be available if you have the AirPort configured as a NAT router and not as a bridge. Also you cannot extend a Guest network. I'm actually surprised that you were given this option.
Since you have a DSL gateway upstream of your AirPorts that is performing as your primary Internet router, you would want all of your AirPorts to be configured as bridges. Regardless if you were connecting them all back to the DSL gateway by Ethernet or creating a WDS extended network.
If you go the route of configuring a single Extreme as a router, you will have a Double NAT configuration, which is not bad in itself, but does add some complexity when attempting to share between network segments.
One option would be to reconfigure the DSL gateway as a bridge, and then, configure one of the Extremes as a router to allow it to handle NAT & DHCP services for the network. This will also give you your guest network. You can also extend this Extreme with the others, but not its guest network ... so, overall, this might not satisfy all of your networking requirements.

Wireless Guest Network using Cisco 4402 as an Anchor Controller

Hello,
We have recently redesigned our wireless guest network in accordance to Cisco's recommended deployment using the anchor controller in the DMZ. We have created two mobility groups (enterprise and anchor). The anchor controller and DMZ has two subnets (guest managment and guest clients). The guest management subnet is connected to the controller and firewall allowing the mobility groups and EOIP tunnels while the guest client network is also connected to the controller and firewall to push the client traffic directly out the firewall. The setup works well but the one part that I'm not happy with is the DHCP. Currently DHCP is being handled on the firewall because of issues we had with dhcp relay and the controllers internal dhcp service.
Does anyone have any information on getting DHCP relay working or the internal dhcp service on the controllers when using as a anchor?
This is basically the setup guide that we followed.
http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.html
Thanks!

Hi,
Make sure you have the IP helper address configured under the VLAN interface on the L3 and also make sure to disable DHCP proxy on both the WLC (Anchor and Foreign).
This will help us as well..
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

Wireless Guest Network, iPADS and MAC Filteing

Hello, I have a question regarding our wireless guest network and using iPADs
Our wireless network consist of (3) 5508 WLC’s running 6.0.188. 2 internal WLC and 1 external anchor WLC for guest. Presently we are only using one of the internal controllers for users the second is only used for fail over. The anchor controller is set up as the DHCP server for guest. We also have a Cisco NAC Guest Server in the DMZ for guest authentication.
We have (10) iPads that need Internet access though our guest portal. We do not want these iPADs to have to enter any credentials just pass through to the internet. We do not want any other device to be able to connect to this SSID. Here’s my question; Getting to the Internet is no problem however when I try to set up a MAC filter just for these devices, they never receive an IP address and never get connected. I have tried setting the filter on both the internal controller and the anchor controller identically and in about every combination I can think of. Does anyone know how to set up a MAC filter on a guest network configured as per Cisco’s recommendation? I also plan to use WPA2 and 802.1x once I get the MAC filter to work. Any help would be appreciated.
Thank You
John

Not all layer 2 and layer 3 security mechanisms are compatible. Refer to this doc
http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080987b7c.shtml#matrix
What security settings have you configured. The settings also need to be identical on both the internal and anchor controller.

HT4145 Does the new Airport Extreme allow "guest network" setup across all my Airports on my network? I have 1 Airport as a router and 6 others as WAP's (bridged)

Does the new Airport Extreme allow "guest network" setup across all my Airports on my network? I have 1 Airport as a router and 6 others as WAP's (bridged)

I assume that all of your WAPs are hard wired on the network.
If.....all of your WAPs are simultaneous dual band Apple AirPort devices like an AirPort Extreme or new AirPort Express.....and.....you have firmware version 7.6.3 (now 7.6.4) installed on all the AirPorts.....and.....you use AirPort Utility 6.3.1 to configure the devices......in theory.....it should work.
I don't have 6 WAPs, but I do have 3 and the network works perfectly allowing extension of both the "main" and "guest" network.

Trying to set up a wireless guest network using Airport base station. The first network setup was fine but the second one doesn't work. Any suggestions?

I purchased the new Airport base station that allows for a wireless setup of a primary network and a guest network. The primary network installation worked great but I cannot get the guest network to work properly. Any suggestions on how to make it work?

The AirPort base station is designed to connect to a simple modem......not a modem/router or gateway device that is often furnished to users by Internet Service Providers.
So, the first troubleshooting question would be to find out what the make and model of the device that you call your "modem" might be.....to see if you have the right kind of product that will allow the Guest Network to operate correctly.

Creating a wireless guest network.

Good afternoon,
I'm trying to set up a guest network for my lad to use with his Xbox 360, laptop, iphone, etc.
At present I have my iMac, Airport Extreme Base Station, Airport Express all connected to my Sky broadband router. I also watch films on my 360 and AppleTV2 via iTunes.
Is there a way to create a network (to access the internet only) so my lad can't watch the films I have on iTunes? He'll also feel good as he'll have his own network (not realising I'm limiting his access;))
Thanks very much for any help in advance,
McFly.

Unfortunately, the Guest Network option is generally not available when the AirPort Extreme is used with another modem/router....in this case the Sky product.
You can check to see if your setup will allow this as follows:
Open Macintosh HD > Applications > Utilities > AirPort Utility
Click on the AirPort Extreme icon, then click Edit
Click on the Wireless tab at the top of the window
Check to see if there is an option to Enable the Guest Network
If yes, assign a name to the network, security and and a password and click Update to save the new settings.
However......If the option to Enable the Guest Network does not appear (see example below), unfortunately you will not be able to setup another wireless network.

Where is the "Guest Network" Setup?

All,
I picked up a new Airport Extreme (AE) from our local Apple store this afternoon. I have been wanting to move our Drobo to a shared USB port, as well as have the option for a "Guest Network". We have lots of Geek buddies and relatives over on the weekends and evenings and I have never liked giving them access to our wireless network, and all that has to offer.
Out of the box, to completely setup (except for the guest network) including sharing the Drobo, Bridging to our FIOS Router, and re-configuring our primary wireless network took less than 20 minutes. (I was VERY impressed) And the network is really quick!
With that said, I can not find anywhere to setup the guest network???? There is no tab, Icon or option under any of the settings in the Airport Utility.
What am I missing here?
Please help!

With that said, I can not find anywhere to setup the guest network???? There is no tab, Icon or option under any of the settings in the Airport Utility.
o AirPort Utility > Manual Setup > AirPort > Guest Network
The AirPort Extreme Base Station (AEBS) must be configured to "Share a public IP address" for this tab to appear in the AirPort Utility.

Guest Network Setup

I have a Linksys EA4500 setup on my corporate network for wireless access. I have enabled the guest network and from all I can tell it's on a seperate subnet from my internal network like it should be. 192.168.x.x My internal is on a 10.x.x.x network. I conenct to the guest network using a laptop and I'm prompted for a password to get to the internet, which I like. The one issue I'm seeing is when I'm connected to the guest network I can still do an RDP session to internal resources. How is this possible if the guest network is on a seperate subnet?
I take a laptop which has not been joined to my domain, connect to the guest ssid, and then open an RPD session and enter an IP address for an internal server and it connects. Is there a setting to keep this from happening?

gv wrote:
Change the internal network to 192.168.1.*.
this might be something you have to do. by design the Guest Network should only allow internet access and with it being a "virtual network", should prevent communication with other computers in the network.

Flapping vlan's after guest network setup

Hi,
I did quite abit of work on our wireless network last night and I'm seeing alot of these logs on our core switch after the work...
069130: Feb 16 12:36:20 CST: %SW_MATM-4-MACFLAP_NOTIF: Host 0018.de81.37ed in vlan 140 is flapping between port Gi1/0/37 and port Po2
069131: Feb 16 12:37:44 CST: %SW_MATM-4-MACFLAP_NOTIF: Host 0021.5c46.12cd in vlan 140 is flapping between port Po2 and port Gi1/0/37
069132: Feb 16 12:39:10 CST: %SW_MATM-4-MACFLAP_NOTIF: Host 001d.e058.f78b in vlan 140 is flapping between port Gi1/0/37 and port Po1
The network here is in the shape of a "V" using 3750-E stacks with the bottom of the "V" being the core 3750-E stack doing the routing for our vlan's. I have 20Gig channels (LACP) creating the "V" between the stacks...Po1 and Po2. I have about 20 1252's and six 1131's connecting back to a 4404 controller...the controller is connected to port 1/0/37 on the core stack.
My vlan's are..
900 - Management vlan
140 - secure wireless
144 - employee guests
145 - guest
I setup our guest networks and H-REAP local switching last night. All wireless networks seem to work fine including the web authentication page for my guest networks. I configured the controller switch interface as a trunk, native vlan 900, and allowed the four vlan's above on the trunk. I did the same to all my AP's...configured the switch interfaces as trunks, native vlan 900, and allowed the four vlan's above on the trunk.
All the AP's were set to H-REAP local switching, native vlan 900 on the controller H-REAP page and the VLAN ID's are correct on the three SSID's I have.
I initally had LAG configured on the controller (this is the last item I did) when I noticed the logs. I removed the three additional interfaces from LAG on the switch, removed the port-channel etc... but the flapping continues.
Did I do something wrong???

Thanks Fella5,
Been on the phone with TAC for 4 hours.
Looks like since I was running H-REAP local switching and the AP interfaces were trunked, the controller interface trunk should not have had the 140,144 and 145 vlans on them.
I now have only the management vlan (900) on the controller trunk and the native vlan is set to 900 as well....do I even need a trunk to the controller??
Anyway, it looks like it's working. I can see clients connected, getting IP addresses, the vlan flapping is gone and I can ping them from around my network.
Thanks for all the posts you and others give on H-REAP, guest networks etc. I did all my configuration from this forum and I really appreciate it.

HT4259 Can a wireless guest network be extended?

Our church has two Airport Extreme Model A1354. Our main wireless network, called FCCAK, is extended just fine throughout the building. Our Guest network, called FCCAK Guest, is not reaching the basement, and it looks like that network is not being transmitted at all from the extender Router. The Airport Extreme Utility has no check box on the guest network Tab to "extend this network." Can we extend two wireless networks using our two Airport Extreme routers? We bought both of these at the same time in March 2010.

Unfortunately it is not possible to extend the guest network from an Airport, it is only possible to extend the "main" network.

Unsecured wireless guest network.

I have Linksys E3000 router.
I have 2 wireless networks set up: One named BigMoose which shows to be secured. The guest wireless neetwork is
BigMoose-guest. It shows that it is unseured.
My problem is: I don't know how to make it secured. I have a seperate password for the uest site but when someone signs
into it they are not asked for the password.
Can someone please help me with this?
I am using Widows 7 Ultimate on my desktop and Windows 8.1 on my laptop. Also 8.1 on my Windows Surface Pro.
Tom

geekychix wrote:
sabretooth wrote:
Guest networks are UNSECURED on all Linksys routers. However you will need a password to access the internet. Why Linksys chose this method, I have no idea. That's one reason these routers should not be placed in a public area, home use only.
All other manufacturers have full WPA2-AES security on their guest networks.
Hi sabretooth,
Guest network is secured. It appears to be unsecured but once you will access a website it will prompt you for the password, @cuberoot is correct there is no option to unsecure the guest network if there is teach me how.
Guest networks are designed for guest, so that if you have visitors they couldn’t access your files because it has a different IP address. The IP address of the guest network is 192.168.3.XX
It is... OK please tell me what security is available for the Guest network please? WPA, WEP or WPA2??

RV220W Wireless Guest Network

I have two RV220W (one is the main router and the other is acting like an access point). The main one [192.168.1.1] is located in our server room so wireless signal from there is very limited. The access point [192.168.1.2] is in the main reception area so has the best signal to give (nothing is plugged into the WAN port).
I want to create a Guest network on a different subnet on the access point RV220W. I've created a separate wireless connection and assigned a different VLAN/Subnet [192.168.2.0] for the guest network. I just want this network to have internet access only, as it is for the customers in the waiting room.
I have it all going, but have no internet connection for that wireless network. I don't know networking very well, but I do have a good understanding of it.
How would I accomplish this?
Thanks for any help.

azhskr1507,
Since the unit has been with you within a month or so i would recommend opening a support ticket. Once you do engineer would assist you in the troubleshooting. You have mention you did a reboot on the unit, did you happen to do a factory reset for 30 seconds ? The client users that are not connecting, what devices are they using?

Wireless Guest network config question

Hello,
I have installed SAP2602I access points at my customers location and configured a corporate network and a guest network. Everything works fine except when a user is connected to the guest network, they cannot access a web server that is hosted internally. Users on the guest network can access any other web-site fine, just not the one hosted by this same company on a local machine. This locally hosted web-site can be accessed by users from the Internet just fine.
I am guessing there is an issue with routing but I am not sure what, any ideas?
Thanks,
Mitchell Smith
North Texas Networks

Hi Steve,
Thanks for your reply. I am sure the problem is a hair pinning issue as the firewall config does not allow connections to the outside address from internal clients.
Can you give me a sample config to make this work? Is it just a firewall mod or more than that?
Thanks,
Mitchell

ISE and NAC wireless guest networks

I have a wireless network that is NAC controlled and use lobby ambassador for guest wireless. What is the best way to migrate to ISE for guest. Are there problems running NAC and ISE on the same controller?
Sent from Cisco Technical Support iPad App

Hello,
For your query regarding ISE and NAC following are my findings, which might help you in order to solve your query.
for your first question:-
ISE is a free software upgrade for customers who have NAC appliance or NAC profiler. This is for both for the base and advance licenses.
ISE is a 50% software discount for customers who have NAC guest server. The 50% discount is a migration part for the base license only. The advance features license will not be impacted by this discount.
for your second question:-
There should be no issues running NAC and ISE on the same controller until and unless you are using two SSIDs.

Wireless Guest Network Setup

Similar Messages

Maybe you are looking for