Monday, November 5, 2018

Help with guest wifi vlan?

Some backstory- I'm at the junior level at an MSP and I was tasked with setting up wifi for a building. The setup is a Ruckus Zone Director with 18 APs- 2 for each of 9 floors. There are 2 SSIDs- production(which is on the regular lan subnet) and guest(which will be on vlan 8, separate subnet)

The ZD and APs are in place and working. But now I need to setup the guest network on the Ruckus

I created a virtual interface, vlan 8, on the Sonic wall that will keep guest traffic away from the lan subnet. There is also a DHCP server on the sonic wall for this vlan

Now comes the tricky part that I'm confused about- 9 Cisco switches and the vlan. Keep in mind there are only 2 vlans. vlan 1(default) and vlan 8(the one I created for Guest wifi). So at first I thought it would be as simple as creating a vlan 8 on each switch and tagging the ports that the APs are plugged into, but that ended up not working. So I'm assuming at this point that each AP port needs to be tagged for both vlan 1 and vlan 8? And does the uplink need to be trunked?

In other words, what exactly needs to be done for these ports that the APs are plugged into, in order for them to work for both SSIDs?

I'll be doing this all through CLI so any specific commands with your feedback would be appreciated

this is what I have so far, for example

interface gi1/10 (AP is plugged into this)

switchport mode access

switchport access vlan 8

But what else needs to be done here?

Thanks- this is my first real project and I'm not the greatest with vlans. trying to get by without asking the engineers too many questions



No comments:

Post a Comment