AirLoom Wireless Controller

WLC OS 3.2 · site: tinkerloft-makerspace · mgmt 10.50.10.5

N10-009 2.3 AP NET 1.4.C AP NET 2.6.B

Work order

Tinkerloft, a community makerspace, is hosting a weekend BYOD workshop. Visitors will bring their own phones, tablets, and laptops and need internet access — but they must stay walled off from the staff network and shop equipment on 10.50.0.0/16, and from each other. Stand up a dedicated guest WLAN on the AirLoom controller, secure it, and segment it. Then answer the review questions, enter a callsign, and submit.

WLAN— not created —

VLAN—

Encryption—

Client isolation—

Guest link statedown

Create guest WLAN

Profile and SSID should read Tinkerloft-Guest. Tag it to the guest VLAN, pick the strongest encryption, turn off WPS, and switch on the captive portal and client isolation.

Profile name

Broadcast SSID

VLAN ID 1–4094

Encryption

WPS Wi-Fi Protected Setup enabled

Captive portal Show terms-of-use splash, then release to internet

Client isolation Block station-to-station traffic on this WLAN

No WLAN applied yet.

Segmentation rules

Keep guests off the internal network. Add a rule that denies the guest VLAN to 10.50.0.0/16. Internet stays permitted by the default rule.

Source

Destination CIDR

Action

Default rule: permit VLAN 80 → 0.0.0.0/0 (internet).

#	Source	Destination	Action
0	VLAN 80 (Guest)	0.0.0.0/0	Permit	default

Lab checklist 0 / 7

Review questions 0 / 4

Submit completed lab

Enter a callsign (a pseudonym — please don't use your real name). Your screenshot, task results, and review answers go to your instructor's drive.

Callsign