topic RE: How do I create an SSID with only internet access on WM3600 with AP4610s in ExtremeWireless (WiNG)

How do I create an SSID with only internet access on WM3600 with AP4610s

CHRLX-ENG — Thu, 15 Jan 2015 07:27:00 GMT

I need to create an SSID for our clients that will only allow internet traffic. I want to block all other traffic to our LAN. How can I accomplish this? Thanks in advance.

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

PARTHIBAN_CHINN — Thu, 15 Jan 2015 13:26:00 GMT

Just create an ssid with security level for wireless.
You might need to do deny rule acl based on ip subnets.

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

dflouret — Thu, 15 Jan 2015 20:33:00 GMT

CHRLX,

The easiest way is to create an SSID and assign it to a vlan that can only connect to internet. The DHCP server should give the wireless clients the address of the internet router as their default gateway.

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

CHRLX-ENG — Fri, 16 Jan 2015 05:51:00 GMT

Daniel... The router is on a different VLAN and therefore cannot be used as a default gateway. Thanks.

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

dflouret — Fri, 16 Jan 2015 05:51:00 GMT

Can you extend that vlan to the controller?

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

CHRLX-ENG — Fri, 16 Jan 2015 05:52:00 GMT

Parthiban... I appreciate your reply, but it is very vague. How can I accomplish what you are recommending? Thank you.

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

PARTHIBAN_CHINN — Fri, 16 Jan 2015 13:56:00 GMT

Note:Assumed L2 switch is a POe enabled switch.

I assume your default gateway is wireless controller and routing is done in controller
1.Assign ip address to controller
2.Create a wlan and map the ssid to the vlan.
Note:bridge mode "local" and bridge mode "tunnel" are two options.
3.map the required secuirty setting in the wlan. [wep,wpa2 etc]
4.Map the wlan to the radios.[wlan mapping]
This will get your wireless network up and running.
with static ip to clients.
now if needed you can use wireless controller as DHCP server or use and external dhcp server
for wireless clients
Gui is the easiest way to configure the controller.

Once the above steps are followed implemented and tested.

Add acl in controller to block specific subnets so that wireless subnets can access only internet.
below is the syntax.reference guide and user guides are available.

http://extrcdn.extremenetworks.com/wp-content/uploads/2014/01/WM3000CLIReferenceGuide_5.2.pdf

deny ip [|any|host ] [|any|host]
[log rule-precedence <1-5000>|rule-precedence <1-5000>]
{rule-description }

Hope this throws some light for your requirement.

RE: How do I create an SSID with only internet access on WM3600 with AP4610s

PARTHIBAN_CHINN — Fri, 16 Jan 2015 18:35:00 GMT

Here is the guide for basic controller configuration

https://www.dropbox.com/s/4kb5p5rl1ycxakl/SVC%20Tech%20Implementation%20Guide%20WM3000%20Series%20SW...
use this as a reference.