LAN Access for Visitors

Issues:

Can externals/ consultants /guests connect to your network without being able to access the Intranet (internal services, servers, resources)? Can such visitors be be granted access in an easy and controlled manner? Are such visitors documented and tracked?

The policy for "guest" access (unknown end-devices) can be specified globally, or on a per-port basis. The policy specifies a vlan to be attributed to guest devices.

• the default policy might (for example) be to globally deny access to unknown devices - and generate an alert.
• or the global policy might (for example) deny access to unknown devices, except in meeting rooms where guests are automatically allowed access to a Guest Vlan.