XV3-8 -> Guest Access isolated from intern network?

Andreas_Mauerer1 · February 24, 2021, 10:44am

Hello,

i have XV3-8 configurated one VLAN:

Is the Guest Network automaticly isolated from our business network? Its safe?

Thanks a lot!

CAM_TSK · February 24, 2021, 11:00am

Andreas,
If you are using same VLAN as AP management VLAN, Guest clients can still access your network.

Thank You.

Andreas_Mauerer1 · February 24, 2021, 2:50pm

Ok what i can i do to deactived the access to intern lan?
The guest should just be able to surf.

PFR · February 24, 2021, 4:02pm

1.Add additional VLAN in AP Group.
2.Create DHCP configuration for this VLAN
3. Set in Geuest WiFi proper VLAN number

CAM_TSK · February 24, 2021, 6:28pm

Andreas,
Configure device as follows:

Configure VLAN interface on device with NAT enabled.

image1723×656 122 KB
Create DHCP pool for the above VLAN

image1748×847 160 KB
Map VLAN created in step above in a WLAN

image1398×731 126 KB
Create ACL rules such that internet traffic is allowed but not to your local network

image1297×538 80.8 KB

Please let me know if you face any issues.

Andreas_Mauerer1 · February 25, 2021, 9:26am

Thanks a lot!

The Guest Access is open, thats correct?
The intern network with WPA2, right?

CAM_TSK · February 25, 2021, 10:26am

Andreas,

Guest Access should be configured to OPEN and VLAN should be the one configured on AP.
If you have queries, please send me tech-support to sta001@cambiumnetworks.com, so that I can edit configuration and share it to you as per your requirement.

Andreas_Mauerer1 · February 25, 2021, 10:32am

Hallo again,

my questions:

i have one VLAN 1 and Pool1 for both WLAN’s. Thats right?

Screenshots for config:
https://www.isarcolor.de/downloads/c1.jpg
https://www.isarcolor.de/downloads/c2.jpg
http s://www.isarcolor.de/downloads/c3.jpg
http s://www.isarcolor.de/downloads/c4.jpg
http s://www.isarcolor.de/downloads/c5.jpg

Last:
my view from deny ip adresses is differnet from yours:
What happend?