Question : Force routing on wireless clients using CISCO WLAN Controller

We are going to setup the WLAN using CISCO 1131 AP and 4404 WLAN controller. The LAN private IP is 10.68.0.0/16 and we plan to use range 192.168.0.0/16 for WLAN. According to company policy, the PCs are forbidden to access LAN and WLAN at the same time. The LAN and WLAN are physically isolated. However, we can not prevent users connect both LAN and wireless. Then technically, how can we enforce this rule? Is it possible to force the routing on the PCs so that when they connect to wireless, the traffic will all go to WLAN's default gateway? And if yes, how to prevent users from manipulating the routing manually (the users have local admin priviledge)?

Answer : Force routing on wireless clients using CISCO WLAN Controller

Hi,

I advise to use cisco security agent, or implement 802.1x yopur network, please read the following:

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/case_study_c36-539649.html
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5707/ps5057/data_sheet_c78-458616.html