This practical assessment aims to configure a campus network that provides secure and

authenticated access to enterprise resources for authorized users via their mobile devices

while also offering filtered public wireless access for unregistered users.

Lab Setup:

In this practical Assessment, we have two access points connected to an access switch. These

access points broadcast two distinct SSIDs: "default" and "Secured." The basic access point

broadcasts the public "default" SSID, while the Linksys access point broadcasts the protected

"Secured" SSID, which is configured for WPA Enterprise security.

VLAN Configuration:

Each SSID is associated with a specific VLAN: VLAN $50$ for the secure "Secured" SSID

and VLAN $60$ for the public "default" SSID.

Note that in a real$-$world architecture, Cisco Wireless LAN Controllers $($WLC$)$ and

Faculty of Information and Communication Technology

I declare that I am familiar

with, and will abide to the rules

of Tshwane University of

Technology

Signature:

$\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_$

Course: Advanced Diploma : IT

Subject :Wireless Networks IV

Semester $22024$

Practical Assessment $1$

Date :$20$ August $2024$

Total Marks $=100$

Examiner: Mr T$.$N Khosa

Moderator :Dr Mabanza

Class List Number:

Student number

Surname Initials Mark:

$2024$

Lightweight Access Points $($LWAPs$)$ would typically be used. Support for WLC is available

in Packet Tracer $7\mathrm{.}1$ with the introduction of the Cisco $2504$ Wireless Controller $($with limited

functionalities$).$

Network Routing:

The VLAN interface for the secure SSID $($interface VLAN $50)$ is hosted by the campus core,

and traffic from this VLAN is directly routed to the datacenter, ensuring efficient access to

enterprise resources.

The VLAN interface for the public SSID $($interface VLAN $60)$ is hosted by the ASA firewall

on its outside interface. Public traffic is filtered by the firewall before entering the campus

network, enhancing security and protecting enterprise resources.

Implementation:

Configure the access points with their respective SSIDs and security settings.

Set up VLANs for the "Secured" and "default" SSIDs.

Establish routing and interface configurations to allow secure traffic to access the datacenter

while filtering public traffic through the ASA firewall.

Test and validate the network configuration to ensure that authenticated enterprise users can

access resources seamlessly while unregistered users have filtered public access