release 8.2, Cisco 8540 Wireless LAN Controller supports the Wired Guest Access
A growing number of
companies recognize the need to provide Internet access to its customers,
partners, and consultants when they visit their facilities. IT managers can
provide wired and wireless secured and controlled access to the Internet for
guests on the same wireless LAN controller. Guest users must be allowed to
connect to designated Ethernet ports and access the guest network as configured
by the administrator after they complete the configured authentication methods.
Wireless guest users can easily connect to the WLAN Controllers with the
current guest access features. This provides a unified wireless and wired guest
access experience to the end users.
Wired guest ports are
provided in a designated location and plugged into an access switch. The
configuration on the access switch puts these ports in one of the wired guest
Layer 2 VLANs.
solutions are available to the customers:
A single WLAN
controller (VLAN Translation mode)–the access switch trunks the wired guest
traffic in the guest VLAN to the WLAN controller that provides the wired guest
access solution. This controller carries out the VLAN translation from the
ingress wired guest VLAN to the egress VLAN.
Two WLAN controllers
(Auto Anchor mode) - the access switch trunks the wired guest traffic to a
local WLAN controller (the controller nearest to the access switch). This local
WLAN controller anchors the client onto a Demilitarized Zone (DMZ) Anchor WLAN
controller that is configured for wired and wireless guest access. After a
successful handoff of the client to the DMZ anchor controller, the DHCP IP
address assignment, authentication of the client, and so on are handled in the
DMZ WLC. After it completes the authentication, the client is allowed to send
and receive traffic.
The configuration of
Wired Guest Access remains the same as on existing WLCs. A Wired Guest Access
Configuration Example can be found at