Share APs with another Network

[Porcap]

Currently have a warehouse with several APs.  A customer asked if they could use our APs rather than installing a duplicate setup.  Can I have 2 separate networks use the same wireless infrastructure.  Maybe a new vlan?

[PaulMcG]

A new SSID tagged to a vlan for their usage could be setup.  Assuming the APs are on switchports set to trunk mode.  After that it's just a matter of isolating that vlan to keep the traffic seperate from yours.

[Porcap]

SSID in bride mode?  And switch port for client network access/trunk?

[alemabrahao]

Hi @Porcap Yes, SSID in bridge mode, but you have to configure VLAN tagging on SSID, and the port that the APs are connected should have to be configured as a trunk.

[Porcap]

to attach the client's network, do I just attach to an open switch port?  Any specific settings?

[alemabrahao]

I didn't understand, what is an open switch port? What's are your switch model?

[BlakeRichardson]

You could using a new SSID and VLAN as suggested already but that would mean sharing switches as well. You would have to be very sure that things are setup securely and that there is no way they would access anything they shouldn't. 

I also wouldn't be offering this for free otherwise your are paying for all of the hardware for their benefit. 

[Porcap]

an available port on the switch, it is an Meraki MS210-24P

[alemabrahao]

I got It, well, you don't need a specific configuration, just a trunk port like this:

[Porcap]

In this example what is designated as the customer's VLAN

[alemabrahao]

It doesn't matter, you can use any VLAN that you want.

[EJN]

Depending on the needs and the relationship with this customer, could it be as simple as an isolated SSID for their use (similar to a Guest WiFi, but specific to this customer)?

[AxL1971]

we have done a similair set where on a guest wireless we have 2 SSID's (guest wifi has a dedicated VLAN to seperate from corportate LAN)

one uses the Meraki splash screen for authentication and the other SSID has a passphrase to connect

Both are on the same DHCP scope but isolated with no peer to peer communciation.

[Porcap]

So a single device is handing out IPaddresses to 2 separate networks?

[AxL1971]

yes a single DHCP server is allocating IP addresses to 2 SSID's - both SSID are on the same VLAN 

They are not seperate networks, both on same subnet but different SSID used for different authentication method

[Porcap]

I am trying to do this with 2 separate networks? Our customer asked us if they could use our APs. Try to figure out a way to do this.  Is this possible?

[AxL1971]

when you say 2 seperate networks, these will be 2 subnets each with a DHCP server to allocate IP addresses, I assume you will be using a VLAN for each of the networks

if so, when you create your SSID, assign the VLAN to the SSID.

[Porcap]

One network will get its IP from DHCP on firewall and the other will have a static IP for the other network.  What do you think?

[AxL1971]

These will be on different VLANs then, therefore on the SSID configuration you can state the VLAN you want that SSID to connect to and thus IP allocation be done based on your VLAN configuration

one SSID DHCP

second SSID static IP based on the VLAN subnet

[Porcap]

sounds good.!