|
Documentation Home for Self-Managed and Enterprise-Managed APs | Evaluation Guide
Set up Internal and Guest Networks
Understanding Guest Network Features
With Guest Network features, you can configure the Devicescape Enterprise-Managed AP to broadcast and function as two isolated wireless networks: a secure "Internal" LAN and a public "Guest" network. Guest clients can access the guest network without a username or password, but they cannot get to the Internal network.
You can define unique parameters for guest connectivity and isolate guest clients from other more sensitive areas of the network. No security is provided on the guest network; only plain-text security mode is allowed. Simultaneously, you can configure a secure internal network (using the same access point as your guest interface) that provides full access to protected information behind a firewall and requires secure logins or certificates for access.
Configuring Guest and Internal Networks
Decide whether to use physically separate networks or VLANs for your Guest and Internal networks.
Configuring Two Physically Separate Networks
If you want Guest and Internal networks on physically separate networks, do the following:
- Use two different wired connections from the network ports on the access point, one to your secure internal LAN and the other to the guest network.
(For a network layout diagram showing physically separate Guest and Internal network connections, see Evaluation Network Layout.)
- Configure Wired (Ethernet) interface settings for physically separate Internal and Guest networks on VLAN. Start by enabling Guest Access and choosing "For Internal and Guest access, use two: Ethernet Ports". (See Setting the Ethernet (Wired) Interface in the Administrators Guide.)
- Provide the Wireless interface (radio) settings and network names (SSIDs) for both Internal and Guest networks. (See Setting the Wireless Interface in the Administrators Guide.)
Configuring Guest and Internal Networks on VLANs
To configure internal and guest networks on virtual LANs (VLANs):
- Use only one wired connection from the network port on the access point to the LAN.
- Configure Wired (Ethernet) interface settings to use VLANs. Start by enabling Guest Access and choosing "For Internal and Guest access, use two: VLANs". (See Setting the Ethernet (Wired) Interface in the Administrators Guide.)
- Provide the Wireless interface (radio) settings and network names (SSIDs) for both Internal and Guest networks. (See Setting the Wireless Interface in the Administrators Guide.)
Logging on to the Guest Network from a Wireless Client
When both the Guest and Internal networks are configured on the AP (either as physically separate networks or as VLANs), wireless clients will see broadasts for both networks.
If you have set up a guest network along with an internal network, the two BSSIDs (network names) will show up in the "View Available Wireless Networks" Dialog. On this dialog, you will see two BSSIDs being broadcast by your Devicescape Enterprise-Managed AP on a single radio. (If you have not yet set up a guest network, you will see only the Internal network broadcast at this point.)
With the Devicescape Enterprise-Managed AP guest access feature, you have the option as an Administrator of adding a level of security to require and record guest information at the splash screen (a one-time activity) before granting guests Internet access. In such cases, you can use the extra level of security to prevent unauthorized guests from getting through even if they obtain an IP addresses.
In this simulation, we try to get to the administration page of the simulated internet gateway (192.168.20.1). With the guest acknowledgement step, the user will see the following guest access portal page prompted by the access point when entering the internet address (192.168.20.1):
After registration, you will then proceed to the Internet Web pages you want to visit by means of your Guest network connection.
Where to Find Out More
- For complete information about Guest Access configuration and management, see Setting up Guest Access in the Administrators Guide.
| 
