MSM7xx Controllers Configuration Guide v6.4.0

• Creating a VSC for guest access
You must create a new VSC to support guest access. Respect the following limitations:
◦ VSC egress mapping: If VLANs are not being used to egress traffic, only the Internet port
(Internet network on the MSM720) can be used to provide access to the protected network
for authenticated clients. This occurs because the DHCP relay agent option Forward to
egress interface always sends traffic to the Internet port for DHCP requests. This requires
setting all options to <Default> as shown.
If you are using VLANs, it is still recommended that authenticated traffic is egressed on
the Internet port (Internet network on the MSM720) when supporting guest access.
◦ DHCP server: Not supported.
◦ DHCP relay agent: Only supported if configured as follows:
• Network address translation (NAT): If traffic is egressed onto the Internet port (Internet network
on an MSM720), NAT must be disabled by selecting Team >> Network > IP interfaces >
Internet port (Internet network on an MSM720).
This applies even when using a VLAN to egress traffic, in which case NAT is disabled when
defining the interface associated with the VLAN.
Guest access and teaming 279