Radio Interface
•Native VLAN ID is the VLAN ID for this default radio interface. The access point assigns this VLAN ID to all client traffic using this radio interface unless you assign unique VLAN IDs to clients through the RADIUS server using RFC 3580 (Section 3.31) tunnel attributes.
Using RFC 3580 (Section 3.31) tunnel attributes, you must configure user VLAN IDs (1‐4094) on the RADIUS server for each client authorized to access the network. The RADIUS server then assigns a VLAN ID to a client after successful authentication using IEEE 802.1x and a central RADIUS server. If a client does not have a configured VLAN ID, the access point assigns the client to the native VLAN ID for the radio interface. The default is 1.
When setting up VLAN IDs for each user on the RADIUS server, be sure to use the RADIUS attributes and values as indicated in Table 4‐5.
Table 4-5 VLAN ID RADIUS Attributes
Number | RADIUS Attribute | Value |
|
|
|
64 | VLAN (13) | |
|
|
|
65 | 802 | |
|
|
|
81 | VLANID (1 to 4094 in hexadecimal) | |
|
|
|
Note: The specific configuration of RADIUS server software is beyond the scope of this guide. Refer to the documentation provided with the RADIUS server software.
•Secure Access specifies whether clients can access the default radio interface network by discovering and automatically configuring the SSID, or whether clients must be already configured with the SSID. Default: Disable
–Enable denies access to wireless clients that do not have the default radio interface network name (SSID) already configured. This default radio interface does not broadcast its network name, so that clients with operating systems like Windows XP do not see the name show up in wireless LAN configuration dialogs.
–Disable broadcasts its network name, and clients can discover and use the SSID to access this default radio interface’s wireless network.
•IBSS Relay: In conjunction with IBSS Relay Control settings (see Filter Control and VLANs on page 4‐18), controls whether clients associated with the default radio interface can establish wireless communications with each other through the AP. Default: Disable
If you enable IBSS Relay, clients can establish wireless communications with each other through the AP. If you set the IBSS Relay Control to All VAP, then clients associated with all IBSS enabled radio interfaces or VAPs can establish wireless communications with each other. If you set the IBSS Relay Control to Per VAP, only the clients associated with the same (IBSS enabled) radio interface or VAP can communicate with each other.
•Maximum Associations (0‐255) specifies the number of clients allowed to associate with this radio interface.
•Fixed Antenna Control selects the use of two diversity antennas or a single antenna. Default: Diversity
–Diversity. The radio uses both antennas in a diversity system. Select this method when the Antenna ID is set to “Default Antenna” to use the access pointʹs integrated antennas. The access point does not support external diversity antennas.