
9-29
Cisco Wireless LAN Controller Configuration Guide
OL-13826-01
Chapter 9 Managing User Accounts
Configuring Wired Guest Access
Step 4 To create a wired LAN for wired client traffic and associate it to an interface, enter this command:
config guest-lan create guest_lan_id interface_name
The guest LAN ID must be a value between 1 and 5 (inclusive).
Note To delete a wired guest LAN, enter this command: config guest-lan delete guest_lan_id
Step 5 To configure the wired guest VLAN’s ingress interface, which provides a path between the wired guest
client and the controller by way of the Layer 2 access switch, enter this command:
config guest-lan ingress-interface guest_lan_id interface_name
Step 6 To configure an egress interface to transmit wired guest traffic out of the controller, enter this command:
config guest-lan interface guest_lan_id interface_name
Note If the wired guest traffic is terminating on another controller, repeat Step 4 and Step 6 for the
terminating (anchor) controller and Step 1 through Step 5 for the originating (foreign)
controller. Additionally, configure the following command for both controllers:
config mobility group anchor add {guest-lan guest_lan_id | wlan wlan_id} IP_address
Step 7 To configure the security policy for the wired guest LAN, enter this command:
config guest-lan security {web-auth enable guest_lan_id | web-passthrough enable guest_lan_id}
Note Web authentication is the default setting.
Step 8 To enable or disable a wired guest LAN, enter this command:
config guest-lan {enable | disable} guest_lan_id
Step 9 If you want wired guest users to log into a customized web login page, enter this command to specify
the filename of the web login page and the wired LAN for which it should display:
config guest-lan custom-web login_page page_name guest_lan_id
Note You can use customized web pages only for the login pages. Login and logout error pages cannot
be customized.
Step 10 If you want wired guest users to be redirected to an external server before accessing the web login page,
enter this command to specify the URL of the external server:
config guest-lan custom-web ext-webauth-url ext_web_url guest_lan_id
Step 11 To define the web login page for wired guest users, enter this command:
config guest-lan custom-web webauth-type {internal | customized | external} guest_lan_id
where
• internal displays the default web login page for the controller. This is the default value.
• customized displays the custom web login page that was configured in Step 9.
• external redirects users to the URL that was configured in Step 10.
Komentáře k této Příručce