Controllerless Networks

Reply
Occasional Contributor I

Guest Wifi using IAP 205. I want to use Captive portal with PSK.

Hi Guys,

I am setting up Guest Wifi using IAP 205. There are 5 APs connecting to a cisco ethernet switch. One of the IAP will become a VC.

There is going to only one Vlan, One SSID, One Profile Guest.

 

Questions:-  

1. How to config Guest Wifi for everyone with PSK authentication and Captive portal. 

2. DHCP will be configured on the switch. Do i need a create a different pool for APs and Users.

 

Guru Elite

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

1) When you click new SSID, use the Guest option. Select captive portal/spash and PSK in the wizard.

2) Yes, your APs should be on a different subnet than your users


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

Thanks Tim.

 

Since these are private IPs, How do i perform Natting on it.

 

Guru Elite

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

If you use the built-in guest network, it will NAT the addresses to the VC
address. If you use existing IP space, you'll need to NAT upstream.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

So i need to Nat out to VC IP.  Does this VC IP have to be in the same subnet.

 

For example:- I have 192.168.1.0/26  (Vlan 10) for the users and 192.168.2.0/28  (Vlan 20) for the APs

 

Does this VC IP have to be in the same subnet which i used for APs.

 

Will DHCP assign an IP to the VC or Is it going to be manual?

 

 

 

Sorry for so many questions. 

Occasional Contributor II

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

If you select the guest under ssid you have the default ip addressing and vlan set to virtual controller assigned and vlan default. This will result in an ip subnet of 172.31.98.0/23 for your guests and the vc will do the source nat by default
Cheers, Frank
Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744
Occasional Contributor II

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

And if you setup acl for the guest ssid you can limit the guest from accessing the internal ip subnet and only allowing access to Internet. Works like a charm
Cheers, Frank
Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744
Occasional Contributor I

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

Is there a way we can define our own subnet for Guest wifi?

 

is that possible?

Occasional Contributor II

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

YES you can. Instead of selecting default as client ip subnet during guest ssid setup select custom and create a new scope.
Cheers, Frank
Aruba Partner Ambassador| AMFX#22| ACCX#613| ACMX#733| ACDX#744
Occasional Contributor I

Re: Guest Wifi using IAP 205. I want to use Captive portal with PSK.

Thanks Mr zero..
Can we choose VC IP be in the same subnet as IAP Subnet.
If I give my IAPs range of 192.168.1.0.
Do I have to use the VC IP from the same range. Or should it be different subnet?
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: