Wireless Access

Reply
Occasional Contributor II
Posts: 19
Registered: ‎08-05-2010

Guest Network Connecting to Internal Network

Hi,

 

We would like to create a guest network on a separate ISP on a 172.x.x.x network but would like to be able to hit some resources on the 192.x.x.x network on a different ISP? Can this be routed on a 3400 controller? We would like to keep the networks separate but if there is a secure way to do the guest network on the 192 network we would do that for a plan "B"

 

Thank You

Marc

Aruba
Posts: 1,377
Registered: ‎12-12-2011

Re: Guest Network Connecting to Internal Network

The controller has an ICSA certified firewall built in.  You can create a network and DENY access to ALL internal subnets except for a few hosts plus NAT the traffic so all guest networks are essentially "off-net"

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Occasional Contributor II
Posts: 19
Registered: ‎08-05-2010

Re: Guest Network Connecting to Internal Network

Hi Seth,

 

If I did this would everything be on the 192.x network?

 

Thank You

Aruba
Posts: 1,377
Registered: ‎12-12-2011

Re: Guest Network Connecting to Internal Network

Yes...the guest traffic - after firewall filtering - will be on the internal network.  In order for this to work, then the controller is the guest's gateway.  

 

If you go with your original design, then there is no "awareness" of the internal network unless you get creative in the upstream router/firewall.  

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Search Airheads
Showing results for 
Search instead for 
Did you mean: