Configuring Guest Access on separate VLAN

Page 2
INTRODUCTION
Business environments are dynamic in nature, with many di erent types of users, each with a wide range of networking
needs. Employees and contractors require Internet connectivity and access to printers, fi les, and other shared resourc-
es through the wireless network. The organization may also want to enable Internet access for visitors, without allowing
them to see the other users or access any corporate resources. This paper will discuss how to use the NETGEAR® ProSAFE®
wireless system to provide an appropriate level of access to multiple groups of users while maintaining the highest level of
security.
OVERVIEW
There are two ways to go about resolving this challenge. One way is to use two access points – one for employees and
contractors, and one for the guest users. However, this strategy requires twice the amount of equipment to be purchased,
confi gured, and managed long-term, thereby increasing capital and operating expenses.
A superior solution is to use access points that support multiple SSIDs, such as NETGEAR ProSAFE access points. Then,
using the NETGEAR ProSAFE WC7520 Wireless Controller, the organization can easily confi gure and maintain two separate
SSIDs on one access point – one for employees and the other for guests. A single ProSafe WC7520 can manage up to 50
access points from a single interface, blending extraordinary fl exibility with robust security administration.
CONFIGURATION
The fi rst thing that needs to be done is to separate the guests from the employees using VLANs on the wired network. To
do this, we’ll create an O ce VLAN and a Guest VLAN. Then, we’ll enable routing on that VLAN and provide Guests with
their own subnet.