Cisco 1231 wirless & visitor containment

One of my biz colleages has a Cisco 1231 wireless AP that they currently use for the computers in the office. They would like to have a separate network configured that would allow them to grant access to visitors, but only allow them to surf the web and not see or be able to touch their other machines. Is this possible with this equipment? What is this commonly called. If so, any suggestions on how to accomplish this would be appreciated. If not, what would they need to implement this.

Reply to
P.Schuman
Loading thread data ...

Often referred to as " guest Internet access"

The Cisco AP1231 is able to support this

It is implemented by having a separate wireless identification code for guest use ( called an SSID) that has no authentication requirement (called open authentication). This SSID is mapped to its own VLAN thus separating guest traffic from other traffic. This guest VLAN would then need to be handled by a layer 3 switch or router that would use policy based routing to ensure all the guest VLAN traffic is only routed to/from Internet.

Reply to
Merv

thanks for the reply - I thought this was some client situation, but turns out to be his local private elementary school - The next basic question is what kind of switch or router is in place and can it handle VLAN segmentation.

Reply to
P.Schuman

The wireless part of this is farily easy with eith a standalone AP single SSID for guest access or a unit like the AP 1231 that will support VLANS across a single fast Ethernet connection.

The tricky part is ensuirng that the guest traffic from either AP setup can ONLY reach teh internet and not be able to reach the organization production network.

So you wil need to look at the wired network to see if it supports VLAN and policy based routing or equivalent.

Reply to
Merv

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.