Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a HP ProCurve 420 wireless access point hooked up to our LAN, which then connects to the internet though a gateway router. Is it possible to set up a guest SSID, which can access the internet but not our LAN?

After reading through the manual, I don't see anything put forward as providing this function, but there are enough features to make me think I may have missed the implications of one of them.

share|improve this question
up vote 2 down vote accepted

The Procurve 420 supports multiple SSIDs, each of which can have different authentication settings and VLAN membership associated with it.

What you want to do is let your regular SSID be part of a VLAN that contains both your LAN and your router, and the guest SSID use a different VLAN that only contains your router.

share|improve this answer
The VLANs sounded promising, but I didn't see where to specify what they could connect to? – Justin Love Oct 5 '09 at 21:59
Since the Procurve 420 only has one 100Base-T port, there is no need to configure the VLANs other than associating them with an SSID (and optionally designating a single VLAN as untagged), the LAN port is implicitely a member of every used VLAN. You can then attach a VLAN-capable switch or router to the LAN port, which will allow you to treat each VLAN as a separate interface. – mmarx Oct 5 '09 at 23:22
Needing to interface with other equipment is the detail I was missing. Off to find my switch's manual. – Justin Love Oct 8 '09 at 18:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.