Guest and Internal network

Solved
Dudley5526
Here to help

Guest and Internal network

My APs are MR42s and MR33s. I have an internal SSID on its own VLAN. Can the internal SSID be locked down to domain users only? I would like to set up a Guest SSID for devices that don't need access to internal resources other than the Internet. How do you assign both SSIDs to the APs?

 

Thank you,

1 Accepted Solution
DarrenOC
Kind of a big deal
Kind of a big deal

At the bottom of that link there’s instructions on how to restrict access to the LAN from the SSID Guest:


Navigate to the Configure > Firewall & traffic shaping page.

  1. Ensure that the Guest network is selected on the SSID drop-down menu at the top of the page.
  2. In the Layer 3 firewall rules section, select Deny from the drop-down menu for the rule labeled Wireless clients accessing LAN.
Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.

View solution in original post

4 Replies 4
DarrenOC
Kind of a big deal
Kind of a big deal

Hi @Dudley5526 

 

This doc should help you with the Guest SSID piece 

 

https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Int...

Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
Dudley5526
Here to help

Darren,

 

Thank you but I've already used that document. If my Internal network is vlan 8 with IP range 192.168.30.x and my guest network is vlan 9 with IP range of 192.168.31.x.  Will the guest network be able to access the APs. Thier IP address is 192.168.30.x?

DarrenOC
Kind of a big deal
Kind of a big deal

At the bottom of that link there’s instructions on how to restrict access to the LAN from the SSID Guest:


Navigate to the Configure > Firewall & traffic shaping page.

  1. Ensure that the Guest network is selected on the SSID drop-down menu at the top of the page.
  2. In the Layer 3 firewall rules section, select Deny from the drop-down menu for the rule labeled Wireless clients accessing LAN.
Darren OConnor | doconnor@resalire.co.uk
https://www.linkedin.com/in/darrenoconnor/

I'm not an employee of Cisco/Meraki. My posts are based on Meraki best practice and what has worked for me in the field.
Dudley5526
Here to help

Thank you, Darren.  I think I got it. I'll do some testing to be sure.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.
Labels