I have an ASA5505 configured with an inside and outside interface and DHCPD for the inside interface. Currently I have a cisco AP (forgot the model) broadcasting only a single essid for the internal network. I want to make it broadcast a second essid and put it on a different vlan so it won't have access to the internal network. The problem I forsee is getting dhcp address guest network. I need to make sure that the dns addresses that are assiged is a public dns and not the internal one (they wont be able to access it).
Here is my would be AP config:
dot11 ssid INTERNAL vlan1 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 XXXX ! dot11 ssid GUEST vlan 3 authentication open mbssid guest-mode ! interface Dot11Radio1 no ip address ssid INTERNAL ssid GUEST mbssid station-role root interface BVI1 ip address 10.0.0.250 255.255.255.0
For the ASA I would add the following:
int eth 0/7 switch port mode acc vlan 3
How do I get address to the guest essid?
Anything else I should configure?
For reference this is my ASA's DHCPD config:
dhcpd dns 10.0.0.101 dhcpd lease 7200 dhcpd domain blah.com dhcpd address 10.0.0.110-10.0.0.170 inside dhcpd enable inside