Playing with 1841 and WLC

fjhesq

Okay, here's a question: I currently have a Cisco 1841 that feeds a HP Curve switch, which is feeding 5 PC's and a Cisco WLC which feeds AP's to areas of my office. Is there a way without creating a VLan that I can segment the network in the 1841 or WLC so that all traffic on the WLC is "internet access only" and "no access to internal resources"? Thanks in advance for you guys help! FYI....still studying for CCNA!

xwesleyxwillisx

You can create an acl on the WLC and block access to the internal network. You said you are studying for the CCNA, do you have any experience with access lists yet?

Here's a good resource:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a00807ce372.shtml

fjhesq

Not really, I've just been reading and digging around the web. It's been good hands-on learning.

LBC90805

Yup ACL for the Internet Access only computers. Also as a "Best Practice" I would put them into two different VLANs. It isn't hard at all and only need a few additional configuration commands. Keep your Wireless side of your network secure by running WPA2 atleast and portsecurity on to include only those mac addresses of the wireless systems.

fjhesq

Thanks everyone for your quick responses. I found the ACL portion of the WLC under the Security tabl so I'm going to play with it. I know the "best practice" would be to create another VLan but for some reason this site I'm working with didn't want to do that and wanted to make the WLC do the work.