Thursday, October 29, 2020

VLAN hopping/double tagging on a wireless network

Hi guys,

I gotta state that I'm not a pro in this area. Recently I encountered this issue where I have to assess wireless security concerns due to an upcoming project, we're planning to buy Cisco 2802I APs along with a 3504 WLC. I know that we'll have a mgmt vlan in a capwap tunnel from an AP to the WLC, carrying multiple vlans (multiple SSID) to the WLC trunk port.

My question is: do you think it is possible to double tag or vlan hop as a wireless client? If I join a certain SSID that is attached to a vlan in the WLC, it might be possible to hop in another, right?



No comments:

Post a Comment