如何正确地将客户essid添加到cisco AP和asa5505中

Question

我有一个内部和外部接口配置的ASA5505，内部接口配置了DHCPD。目前，我有一个思科AP (忘记模型)广播，只有一个内部网络essid。我想让它广播第二个essid，并把它放在一个不同的vlan，这样它将无法访问内部网络。我忽略的问题是获得dhcp地址来宾网络。我需要确保被辅助的dns地址是一个公共dns，而不是内部dns(他们无法访问它)。

下面是我的应该是AP配置：

dot11 ssid INTERNAL
   vlan1
   authentication open 
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 XXXX
!
dot11 ssid GUEST
   vlan 3
   authentication open
   mbssid guest-mode
!
interface Dot11Radio1
 no ip address
 ssid INTERNAL
 ssid GUEST
 mbssid
 station-role root

interface BVI1
ip address 10.0.0.250 255.255.255.0

对于ASA，我要补充如下：

int eth 0/7
switch port mode acc vlan 3

我怎么才能找到客人的地址？

还有什么我应该配置的吗？

作为参考，这是我的ASA的DHCPD配置：

dhcpd dns 10.0.0.101
dhcpd lease 7200
dhcpd domain blah.com
dhcpd address 10.0.0.110-10.0.0.170 inside
dhcpd enable inside

Answer 1

我从http://www.dasblinkenlichten.com/?p=5那里找到了答案

Configure a third VLAN (vlan 3) 
ASA(config)# int vlan 3  
ASA(config-if)# no forward interface Vlan1  
ASA(config-if)# nameif GUEST  
ASA(config-if)# security-level 50  
ASA(config-if)# ip address <ip address> <subnet mask>

Assign the VLAN to a switchport 
ASA(config)# int ethernet0/<Interface number> 
ASA(config-if)# switchport access vlan 3

Create a new DHCP scope for the guests and apply it to the VLAN 
ASA(config)# dhcpd address <start address>-<end address> GUEST 
ASA(config)# dhcpd dns <Outside DNS server> interface GUEST 
ASA(config)# dhcpd enable GUEST

Enable outbound access by adding to the NAT 
ASA(config)# nat (GUEST) 1 <Guest subnet number> <Guest subnet mask>

Configure the Managed switch you are using to connect the AP and the ASA 
Configure a port on the switch for the AP 
Switch(config)# int ethernet0/<Interface number> 
Switch(config-if)# switchport mode trunk 
Switch(config-if)# switchport trunk allowed vlan <production vlan number>, 3

Configure a port on the switch for the Guest VLAN 
Switch(config)# int ethernet0/<Interface number> 
Switch(config-if)# switchport access vlan 3

Configure a port on the switch for the Production VLAN 
Switch(config)# int ethernet0/<Interface number> 
Switch(config-if)# switchport access vlan <production vlan number>