Wired Guest Access
It’s possible to have the WLC authenticate guest access for wireless, but also for wired access.
Create a new WLAN with the type GUEST LAN
Configure an Ingress Interface. At this interface the clients comes in.
Configure an Exgress Interface. To this interface the client do have access when he/she is authenticated successfully.
The layer 3 security is ofcourse web authentication.
The access switch must have a direct layer-2 connectivity to the WLC (no routing!)
The DHCP server defined on the egress interface is used for the client.