Cisco WLC 9800 Guest SSID Configuration | English

hello everyone welcome to my youtube channel life of a network engineer this channel will be more on networking information and also other learnings what i've learned throughout my life okay let's skip to the video now so this video will be on how do we set up a guest wi-fi ssid in our 9800 rwlc i have already put couple of videos on cisco 9800 like how do we set up the 9800wt in a vmware environment we have a workstation and also how do we do a detailed configuration in the cisco wc 9800 i'll be giving the links on the top if you want you can make use of it okay so let's skip to the video now how do we set up a guest user in whi 9800 first thing is we will have to go under configuration and then set up a triple a or the now for setting up a authentication you will have to go on a triple a method list and then add a new aaa authentication list which is called as guest okay and the type should be login and the group type should be local okay and then you'll have to click on apply to device and the second step after this should be to configure the web authentication which will be under configuration security and then web authentication okay in this web authentication there'll be something called a certificate as you see it is not secured so if you're installing this in your environment this is where you have to import the new certificates and then run them okay which is https certificate and also the web bot certificates for https here you'll have to just click import and fill the details and then initiate the import using the 3cd1 on any other software so here we are not going to use it but i'll say tell you how do we do it okay uh so under here we'll have to go on the global and then the global will have a virtual ip address and you can always try select the type which is web both bypass consent and web consent so there are multiple options we are looking into web bot now okay as i said before if you have installed a certificate that will be coming here so you will have to just select the certificate which is as part of the guest but i feel that as it is guest you don't have to apply any certificate you can just leave it as it is if you are applying a certificate then yes the url uh redirection has to be configured here that is called as a host name and you'll have to save the configuration suppose if you like to configure a banner like when someone is logging in they'll have to get a banner on top of it you can configure the banner here like it is a private uh network or something like that okay and after that the main things here are maximum http connections and also the virtual ip okay and other than that these are all the optional where in https intercept captive bypass portal uh these are the optional fields if you want you can enable them and configure accordingly so i'll keep this for now and i'll just keep on update and apply so you should always configure the web bot under global only reason is because i'll show you suppose you are having some you are trying to configure some other test environment or guest environment but the main thing is you won't be able to get the virtual ip here so for a redirect of web authentication you will need the virtual ip so it's always mandatory to configure under global okay so i'll delete this phone now and the next option is after configuring the web path you will have to configure the wlan that will be under configuration tag and profile and then wlan here we will configure a guest ssid here we will have to configure the guest ssid as guest okay we leave the ssid as it is and we'll enable as status and broadcast enabled if you are having an advanced ap then you can select all multiple aps multiple types of aps then you can select all and then under security you will have to disable the layer 2 and under layer 3 you have to enable web policy and then you remember the configuration global wherein we gave the ip address of 19202.1 which is the default ip and you can configure any ip for a matter of fact and then authentication list you remember the first thing what we configure and the most of the times the best way to do is to configure pre-auth acl which is which is pre-auth v4 i'll tell you what that acl acls okay when you see here it will be under configuration security and acm okay this is the pre-auth acm so this acl by default stops the guest users from hitting any of your our network segments except the dns and the dhcp ip okay ah that is one way to apply it sometimes you get an error so there is a workaround for it we look that in detail later we have configured the wlan and everything so the last step in this will be to configure the guest users so that will be under configuration and then guest user okay so here you can see i've just created a test user you can create multiple users as well so here the username is test and the description is guest user you can you'll have to give the password and if you leave this to 0 which means that you can connect unlimited users here or you can restrict some number of users based on the logins and here is the lifetime like how much time should be this username and password be valid you can set that here and then click on update policies okay once this is done when you hit the ssid uh here you will get a redirection when you connect the guest you will get you will be automatically redirected to the ip web bot ip which is which is 19202.1 and then you will be prompted for the username and password and once you are given you will be connected to the entrance so if you haven't subscribed to my channel please subscribe to my channel if you have any doubts let me know in the comment section below thanks for the time guys happy learning

Channel: Life of a Network Engineer

Views: 1,659

Keywords: cisco wireless, cisco wireless controller, cisco wireless lan controller, wireless lan controller, wlc, cisco wlc tutorial, cloud wlc, 9800, wireless, 9800-cl, wireless controller, cisco wlc, cisco wlc configuration, catalyst 9800, cisco ccna, cisco systems, cisco networking, cisco LAB, networking labs, networking, computer networks, cisco certifications, cisco, WLC, wlc controller configuration, guest ssid in wlc, guest ssid

Id: I5oVMC_3LUY

Length: 6min 40sec (400 seconds)

Published: Mon Aug 09 2021