
9-23
Cisco Wireless LAN Controller Configuration Guide
OL-13826-01
Chapter 9 Managing User Accounts
Configuring Wired Guest Access
Configuring Wired Guest Access
Wired guest access enables guest users to connect to the guest access network from a wired Ethernet
connection designated and configured for guest access. Wired guest access ports might be available in a
guest office or through specific ports in a conference room. Like wireless guest user accounts, wired
guest access ports are added to the network using the lobby ambassador feature.
Wired guest access can be configured in a standalone configuration or in a dual-controller configuration
that uses both an anchor controller and a foreign controller. This latter configuration is used to further
isolate wired guest access traffic but is not required for deployment of wired guest access.
Wired guest access ports initially terminate on a Layer 2 access switch or switch port configured with
VLAN interfaces for wired guest access traffic. The wired guest traffic is then trunked from the access
switch to a controller. This controller is configured with an interface that is mapped to a wired guest
access VLAN on the access switch. See Figure 9-15.
Figure 9-15 Wired Guest Access Example with One Controller
If two controllers are being used, the foreign controller, which receives the wired guest traffic from the
access switch, forwards it to the anchor controller. A bidirectional EoIP tunnel is established between
the foreign and anchor controllers to handle this traffic. See Figure 9-16.
232048
Internet
VLAN ID:
236
,
guest LAN:
1
egress interface,
guest-ds
ingress interface,
sidkrish-intf
Controller
(foreign)
Controller
(anchor)
SSID: internal
SSID: guest
Wireless
guest
client
Access
switch
Conference
room
Guest
office
Wired guest access portsWired guest access ports
Komentarze do niniejszej Instrukcji