Wireless Guest Network using Cisco 4402 as an Anchor Controller

Hello,
We have recently redesigned our wireless guest network in accordance to Cisco's recommended deployment using the anchor controller in the DMZ. We have created two mobility groups (enterprise and anchor). The anchor controller and DMZ has two subnets (guest managment and guest clients). The guest management subnet is connected to the controller and firewall allowing the mobility groups and EOIP tunnels while the guest client network is also connected to the controller and firewall to push the client traffic directly out the firewall. The setup works well but the one part that I'm not happy with is the DHCP. Currently DHCP is being handled on the firewall because of issues we had with dhcp relay and the controllers internal dhcp service.
Does anyone have any information on getting DHCP relay working or the internal dhcp service on the controllers when using as a anchor?
This is basically the setup guide that we followed.
http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.html
Thanks!

Hi,
Make sure you have the IP helper address configured under the VLAN interface on the L3 and also make sure to disable DHCP proxy on both the WLC (Anchor and Foreign).
This will help us as well..
lemme know if this answered your question..
Regards
Surendra
====
Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

Similar Messages

Trying to set up a wireless guest network using Airport base station. The first network setup was fine but the second one doesn't work. Any suggestions?

I purchased the new Airport base station that allows for a wireless setup of a primary network and a guest network. The primary network installation worked great but I cannot get the guest network to work properly. Any suggestions on how to make it work?

The AirPort base station is designed to connect to a simple modem......not a modem/router or gateway device that is often furnished to users by Internet Service Providers.
So, the first troubleshooting question would be to find out what the make and model of the device that you call your "modem" might be.....to see if you have the right kind of product that will allow the Guest Network to operate correctly.

Wireless Guest Network Setup

Hi Guys,
We have a wireless network using Cisco infrastructure (WLC 4402, WCS, thin clinet APs).
We also have guest wireless network and we are using a third party aplication for web authentication.
I am trying to setup wireless guest network using WLC and WCS and wolud like to remove the third party application.
I really don't know where to start. I am expecting a complete step by step kind of a information or atleast some use full hints and links.
Thanks in advance.

Hi Sohail,
here is the step by step procedure to configure the Web auth using cisco WLC..
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008067489f.shtml
Lemme know if this answered ur question!!
Regards
Surendra

Wireless Guest Network, iPADS and MAC Filteing

Hello, I have a question regarding our wireless guest network and using iPADs
Our wireless network consist of (3) 5508 WLC’s running 6.0.188. 2 internal WLC and 1 external anchor WLC for guest. Presently we are only using one of the internal controllers for users the second is only used for fail over. The anchor controller is set up as the DHCP server for guest. We also have a Cisco NAC Guest Server in the DMZ for guest authentication.
We have (10) iPads that need Internet access though our guest portal. We do not want these iPADs to have to enter any credentials just pass through to the internet. We do not want any other device to be able to connect to this SSID. Here’s my question; Getting to the Internet is no problem however when I try to set up a MAC filter just for these devices, they never receive an IP address and never get connected. I have tried setting the filter on both the internal controller and the anchor controller identically and in about every combination I can think of. Does anyone know how to set up a MAC filter on a guest network configured as per Cisco’s recommendation? I also plan to use WPA2 and 802.1x once I get the MAC filter to work. Any help would be appreciated.
Thank You
John

Not all layer 2 and layer 3 security mechanisms are compatible. Refer to this doc
http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080987b7c.shtml#matrix
What security settings have you configured. The settings also need to be identical on both the internal and anchor controller.

Wired + Private Wireless + Guest Networks

I'm attempting to setup a configuration that I don't seem able to get correct. I have a small wired network at my church with a file server and a couple of dozen users, some of which have laptops and would like to be able to roam wirelessly through the building. In addition, I would like to have an unsecured wireless guest network for visitors which provides access to the internet and does not have access to the file server.
The specifics are a wired 192.168.1.xxx network with a NAT'd DSL modem/router. I have 4 Airport Extreme dual radio N devices. I've tried setting the first Airport Extreme unit to shared IP, the only setting that allows me to also use a guest network, with a private SSID handing out 172.0.xxx.xxx addresses and a guest network handing out 10.0.xxx.xxx addresses. It seems logical to me that I would want to used bridged mode to allow my private wireless uses to see the server, but the Airport Extreme tells me I can not use a guest network with that setting.
With this setup, I can not get to my server by name, but I can get to by IP address. I guess that's not a huge problem since I have such a small number of users, I can add the server IP address to a hosts file on each client. What bothers me most is that I can get to the server IP from the guest network as well as the private network. Am I missing something?
My second point of confusion is when I try to configure the other 3 Airport Extremes to extend the network. The configuration tools asks me which wireless network I want to extend, and allows me to choose only the private network OR the guest network. I thought it should be able to extend both networks simultaneously. Am I mistaken on this as well?
I'm certain I've left out plenty of information you may need to assist so please ask, I will gather what ever I can. Thanks in advance.

Hello muellgre. Welcome to the Apple Discussions!
Unfortunately, Apple does not provide you with very many options when it comes to their Guest network feature. It is basically designed to work with a single AirPort/Time Capsule router in your network configuration.
As you have found out, it will only be available if you have the AirPort configured as a NAT router and not as a bridge. Also you cannot extend a Guest network. I'm actually surprised that you were given this option.
Since you have a DSL gateway upstream of your AirPorts that is performing as your primary Internet router, you would want all of your AirPorts to be configured as bridges. Regardless if you were connecting them all back to the DSL gateway by Ethernet or creating a WDS extended network.
If you go the route of configuring a single Extreme as a router, you will have a Double NAT configuration, which is not bad in itself, but does add some complexity when attempting to share between network segments.
One option would be to reconfigure the DSL gateway as a bridge, and then, configure one of the Extremes as a router to allow it to handle NAT & DHCP services for the network. This will also give you your guest network. You can also extend this Extreme with the others, but not its guest network ... so, overall, this might not satisfy all of your networking requirements.

HT4199 I have a new iPhone 4s. I have a home wi-fi network using Cisco Linksys2000 router with all settings per this article - phone will not see network if set to 5 GHz channel width - solution?? 2.4 works but is not optimal with other devices in home

I have a new iPhone 4s. I have a home wi-fi network using Cisco Linksys2000 router with all settings per this article - phone will not see network if set to 5 GHz channel width - solution?? 2.4 works but is not optimal with other devices in home (computers; tivo). Have others seen this? Any advice is much appreciated.

Stephen Spark is right - your best alternative is to use a simultaneous dual band wireless router like the AirPort Extreme. Your Cisco Linksys2000 is not a dual band router, meaning that it will be constrained to operate at the slowest speed of all the devices on your network.
The AirPort Extreme's dual networks will support all your 802.11n devices as well as all your 802.11b/g devices on both the 2.4 and 5 GHz frequencies simultaneously.

Hi I am hoping to add my 2 TB time capsule to my existing wireless network using cisco dpq 3925 modem. I have two mbp one running Yosemite and the other os 10.7.5

I have a time capsule 2TB model 1409. I would like to connect it to my existing wireless network (using a cisco DPQ 3925 modem). I have two mac book pro one running Yosemite and the other OS 10.7.5. The best I can do is to connect the TC to the Modem via ethernet. Have one of my MBP connect to the time capsule using a ethernet cable and have the TB set to bridge mode. In this configuration, both mbp and the iPad can detect the TC but when I try to connect it to the wireless network, using the same network name and password, the light flashes amber and I cannot detect the time capsule again.

Correct..
The best I can do is to connect the TC to the Modem via ethernet.
The TC does not connect to non-apple routers by wireless.. well. It is possible but so poor a method that Apple seem to have eliminated it in the setup wizard.. I would take that as a good thing..
If you cannot use ethernet you have two choices..
Use another apple router that is plugged into the Cable modem.. eg a second hand Extreme Gen5 or the latest Express.. the Extreme is both cheaper and better.
Or you can use a set of EOP (homeplug) adapters.. but they cannot be guaranteed to work so you should buy from a place that allows returns.

Trying to set up guest network on cisco 1141N

I would like to have a separate SSID on my autonomous aironet 1141 so that guests in my home can connect to my network without me giving out the password. I am not very experienced with cisco ios so if someone could either point me in the right direction or tell me the commands to run that would be awesome. I don't care whether or not the guest network is on a separate vlan but I would then have to have the ap act as a dhcp server (which i dont know how to do either). I have a basic tp-link switch that I would be able to add a trunk to the access points port but thats about it. My current dhcp server is on windows server 2008 r2. Any help would be appreciated.
I would also like to add that this is a home network in the middle of nowhere and im not too concerned about unauthorized use. This will only be active during parties and family events.

It would be best to have multiple vlans to separate the traffic. Here is a doc on creating multiple SSIDs on an autonomous access point.
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/service-set-identifier-ssid/116118-configure-ap-ssid-ios.html
http://www.cisco.com/c/en/us/support/docs/interfaces-modules/security-modules-routers-switches/116586-config-ap-00.html
-Scott

Creating a wireless guest network.

Good afternoon,
I'm trying to set up a guest network for my lad to use with his Xbox 360, laptop, iphone, etc.
At present I have my iMac, Airport Extreme Base Station, Airport Express all connected to my Sky broadband router. I also watch films on my 360 and AppleTV2 via iTunes.
Is there a way to create a network (to access the internet only) so my lad can't watch the films I have on iTunes? He'll also feel good as he'll have his own network (not realising I'm limiting his access;))
Thanks very much for any help in advance,
McFly.

Unfortunately, the Guest Network option is generally not available when the AirPort Extreme is used with another modem/router....in this case the Sky product.
You can check to see if your setup will allow this as follows:
Open Macintosh HD > Applications > Utilities > AirPort Utility
Click on the AirPort Extreme icon, then click Edit
Click on the Wireless tab at the top of the window
Check to see if there is an option to Enable the Guest Network
If yes, assign a name to the network, security and and a password and click Update to save the new settings.
However......If the option to Enable the Guest Network does not appear (see example below), unfortunately you will not be able to setup another wireless network.

HT4259 Can a wireless guest network be extended?

Our church has two Airport Extreme Model A1354. Our main wireless network, called FCCAK, is extended just fine throughout the building. Our Guest network, called FCCAK Guest, is not reaching the basement, and it looks like that network is not being transmitted at all from the extender Router. The Airport Extreme Utility has no check box on the guest network Tab to "extend this network." Can we extend two wireless networks using our two Airport Extreme routers? We bought both of these at the same time in March 2010.

Unfortunately it is not possible to extend the guest network from an Airport, it is only possible to extend the "main" network.

Unsecured wireless guest network.

I have Linksys E3000 router.
I have 2 wireless networks set up: One named BigMoose which shows to be secured. The guest wireless neetwork is
BigMoose-guest. It shows that it is unseured.
My problem is: I don't know how to make it secured. I have a seperate password for the uest site but when someone signs
into it they are not asked for the password.
Can someone please help me with this?
I am using Widows 7 Ultimate on my desktop and Windows 8.1 on my laptop. Also 8.1 on my Windows Surface Pro.
Tom

geekychix wrote:
sabretooth wrote:
Guest networks are UNSECURED on all Linksys routers. However you will need a password to access the internet. Why Linksys chose this method, I have no idea. That's one reason these routers should not be placed in a public area, home use only.
All other manufacturers have full WPA2-AES security on their guest networks.
Hi sabretooth,
Guest network is secured. It appears to be unsecured but once you will access a website it will prompt you for the password, @cuberoot is correct there is no option to unsecure the guest network if there is teach me how.
Guest networks are designed for guest, so that if you have visitors they couldn’t access your files because it has a different IP address. The IP address of the guest network is 192.168.3.XX
It is... OK please tell me what security is available for the Guest network please? WPA, WEP or WPA2??

RV220W Wireless Guest Network

I have two RV220W (one is the main router and the other is acting like an access point). The main one [192.168.1.1] is located in our server room so wireless signal from there is very limited. The access point [192.168.1.2] is in the main reception area so has the best signal to give (nothing is plugged into the WAN port).
I want to create a Guest network on a different subnet on the access point RV220W. I've created a separate wireless connection and assigned a different VLAN/Subnet [192.168.2.0] for the guest network. I just want this network to have internet access only, as it is for the customers in the waiting room.
I have it all going, but have no internet connection for that wireless network. I don't know networking very well, but I do have a good understanding of it.
How would I accomplish this?
Thanks for any help.

azhskr1507,
Since the unit has been with you within a month or so i would recommend opening a support ticket. Once you do engineer would assist you in the troubleshooting. You have mention you did a reboot on the unit, did you happen to do a factory reset for 30 seconds ? The client users that are not connecting, what devices are they using?

Does the guest network use more electricity?

Does turning on the guest network cause the Airport Extreme to use more electricity?
I wonder if I can save some money by turning it off since I don't have guests over that require WiFi very often. Also would the unit run any cooler w/o the guest network?
Thanks for your help.
Olaf

Does turning on the guest network cause the Airport Extreme to use more electricity?
Of course.
Also would the unit run any cooler w/o the guest network?
Maybe marginally.

AX guest network using vlan in the switch

Hi!
I'm thinking of setting up a wlan and guest wlan by setting up separate Airport Expresses on different VLANs. The new gen. The setup would be 3 AXs on the internal network and 3 AXs as guest network. VLAN1 is internal and VLAN2 is guest. All AXs wil lbe set up in brigde mode. The AXs aren't VLAN aware so they'll just pass along whatever packets coming their way, right? I will configure the switch to use VLAN1 on all ports except 4 on VLAN2. 3 for the AXs and one to hte firewall that also provides DHCP for VLAN2.
Would this work OR have i missed something vital here?
/Hasse

Thanks for the info, Unfortunately, as suspected the Arris model that you have is known as a "gateway", or "modem/router".
The AirPort Extreme recognizes that there is another router "upstream" on the network, so it correctly chooses the Bride Mode setting to allow correct operation on the network.
The downside to this is that the Guest Network cannot be enabled when the AirPort is configured in Bridge Mode.
If the Guest Network feature is important to you, check with your service provider to see if they can supply a simple modem to connect to the AirPort Extreme.....not a "gateway" or "modem/router" device.

Wireless Guest network config question

Hello,
I have installed SAP2602I access points at my customers location and configured a corporate network and a guest network. Everything works fine except when a user is connected to the guest network, they cannot access a web server that is hosted internally. Users on the guest network can access any other web-site fine, just not the one hosted by this same company on a local machine. This locally hosted web-site can be accessed by users from the Internet just fine.
I am guessing there is an issue with routing but I am not sure what, any ideas?
Thanks,
Mitchell Smith
North Texas Networks

Hi Steve,
Thanks for your reply. I am sure the problem is a hair pinning issue as the firewall config does not allow connections to the outside address from internal clients.
Can you give me a sample config to make this work? Is it just a firewall mod or more than that?
Thanks,
Mitchell

Wireless Guest Network using Cisco 4402 as an Anchor Controller

Similar Messages

Maybe you are looking for