Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i've a some Cisco WAP2000 access point. These are used to allow our employee and our warehouse to connect to out network. I would like to allow guest's to connect but for using only internet, with no limitations, and hide our disks, printers etc.. I know this access point allow multiple SSID but i don't know how to use this feature to create a guest network. Thanks

share|improve this question

I am not fammiliar with Cisco WAP access points, but a you should be able to configure two SSIDs, each in its own VLAN. So you just create a 'guest' VLAN for them.

After that, you just need to set up access policies on the router/firewall, to only allow connections from the guest subnet to the internet, and dissalow connections to other parts of the network. Also it would be smart to enable logging in case of abuse (depends on your local laws what you have to log, and what not).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.