Public wireless on separate VLAN

[Larry Dougher]

This should be pretty easy for someone. A little background: We have eleven 230 radios and a Wireless Edge Services Module for the controller.

After visiting another local HS and talking to their IT Director, I found out what he does with his public wi-fi and would like to do the same thing at our school. Basically, there would be the WLAN SSID which is set up all the images and has the really long key and will continue to just work as always. Then, there would be GUEST or PUBLIC SSID which would be on a separate VLAN and would only allow the internet (obviously including our filter) so a visitor couldn't come in and simply just scan IPs, etc.

The way my predecessor had it setup it is a GUEST WLAN SSID on VLAN 1 just like our standard SSID with a web-auth, like a hotel, which I don't like. I just want it simple for visitors and the community to come in and use our wi-fi particularly on the weekends, etc. but also secure which is why I believe the separate VLAN needs to be in play.

How would I accomplish this?

Thanks in advance!