networking - Cisco iOS - Two SSID's , 1 blocking specific URL -
the routers here broadcast 2 ssid. 1 guest, other company users. our users attempting access specific url unable through company wifi. able access url through guest network , when directly connect via ethernet. led me believe acl issue on company wifi blocking it. not use web gui our routers , new cisco ios how permit specific url? access-list belong to? here info specific ssid / interface:
interface dot11radio1.1 encapsulation dot1q 1 native no ip route-cache bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 input-address-list 700 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled
as can see imports address-list 700 mac addresses each user , blocks - unknown-source. have edit bridge-group or have create access-list specific url's , import bridge-group well? or on complicating things?
the control on url access not happen there. should configuration block this:
class-map match-any nofacebook match protocol http host "*facebook.com" match protocol http host "*youtube.com" ! policy-map nofacebook class nofacebook drop
and applied "internet" facing interface this:
interface gigabitethernet0/0 service-policy output nofacebook
maybe guests being routed through link? have acls in place?
Comments
Post a Comment