Wireless Access

Hello I show you the configuration of my client and I ask you my question after:

 

3 SSDI: Employee (vlan-10), garage (vlan-10) and Guest (vlan-20)

 

My client won’t to add another internet only for the Guest.

 

 

I would like to know if I have something to do with the controller or if the router can route the VLAN Guest to the internet GUEST?

 

Thank you

We have a similar setup.

 

We extend the Internet-for-guests on a VLAN dot-interface from the edge router to the switch (2950 in your drawing) and trunk that VLAN to the controller.

Guest users get placed in the guest-internet VLAN and are neatly segregated from employee users.

 

--Matthew

If I understand, I have nothing to change on the controller because the GUEST is already on its VLAN. It remains only to change the setting on the router to indicate that the internet that enters the port x will be on the Guest VLAN. That correct?

That sounds like you've got it. 

I use the same post, because is the same client and he change is mind. This is the new scenario:

 

 

This is my question: Can I use the Aruba Controller to redirect all SSID GUEST to then new internet connexion?

Sure, same thing. 

 

Put the new internet connection into a VLAN and then put the guest SSID into that VLAN.

Ok but the traffic have to go to the router or the traffic go directly to the internet GUEST?

 

The client don't want the SSID GUEST go to the switch and the router.

All guest traffic will be tunneled back to the controller, and since you show the guest internet connected directly to the controller, the traffic will not have to go anywhere else but to follow the connection out that path.

Ok, for example:

 

If the internet for GUEST is pluged in the port 1 of the controller, I have to assign the vlan 20 (vlan Guest) to the port 1 and remove the vlan 20 on the other port.

Correct.

Thank you

My pleasure.  Good luck with your client.

 

-----------------------------------------------------------------------------------

If my anwers have been helpful, please click the kudos button

Reference to the above diagram, Where NATTing would be done if we do have only single IP for guest internet (I guess on controller). What commands would be use on Aruba controller to NAT guest network to single guest IP address while employee network to single enterprise Internet.

My personnel router can do my NAT and the router of my FAI can do my NAT to.

Yup NATTing can be done on router or L3 switch. I just want to know how can we configure on controller if we don't have router on site.