I have an ASA5505 configured with an inside and outside interface and DHCPD for the inside interface. Currently I have a cisco AP (forgot the model) broadcasting only a single essid for the internal network. I want to make it broadcast a second essid and put it on a different vlan so it won't have access to the internal network. The problem I forsee is getting dhcp address guest network. I need to make sure that the dns addresses that are assiged is a public dns and not the internal one (they wont be able to access it).
Here is my would be AP config:
dot11 ssid INTERNAL
vlan1
authentication open
authentication key-management wpa version 2
mbssid guest-mode
wpa-psk ascii 7 XXXX
!
dot11 ssid GUEST
vlan 3
authentication open
mbssid guest-mode
!
interface Dot11Radio1
no ip address
ssid INTERNAL
ssid GUEST
mbssid
station-role root
interface BVI1
ip address 10.0.0.250 255.255.255.0
For the ASA I would add the following:
int eth 0/7
switch port mode acc vlan 3
How do I get address to the guest essid?
Anything else I should configure?
For reference this is my ASA's DHCPD config:
dhcpd dns 10.0.0.101
dhcpd lease 7200
dhcpd domain blah.com
dhcpd address 10.0.0.110-10.0.0.170 inside
dhcpd enable inside