Monday, December 19, 2011

VRF-Lite guest VLAN for Wireless

ip vrf GUEST_WIFI
 description Guest vlan
interface Vlan66
 description Guest WiFi
 ip vrf forwarding GUEST_WIFI
 ip address 10.10.10.250 255.255.255.0
 ip nat inside
 ip virtual-reassembly
ip access-list extended nonat0_GUEST_WIFI
 deny   ip 10.10.10.0 0.0.0.255 10.10.10.0 0.0.0.255
 permit ip 10.10.10.0 0.0.0.255 any
ip nat inside source list nonat0_GUEST_WIFI interface FastEthernet1 vrf GUEST_WIFI overload
ip route vrf GUEST_WIFI 0.0.0.0 0.0.0.0 FastEthernet1 192.168.0.1 global
ip dhcp pool GUEST_WIFI
   vrf GUEST_WIFI
   network 10.10.10.0 255.255.255.0
   default-router 10.10.10.250 
   dns-server 8.8.8.8  
   domain-name guest
   lease 2

1 comment:

Unknown said...

I think your blog is very powerful to me. We have hope that u can keep up the good job.
guest wireless