Cisco Systems ISA550

Wireless (for ISA550W and ISA570W only)

Configuring the Basic Settings

Cisco ISA500 Series Integrated Security Appliances Administration Guide 209

•Bandwidth Channel: Choose 20 MHz channel bonding (spacing), or choose

Auto to let the system determine the optimal channel spacing to use. This

setting is specific to 802.11n traffic.

•Extension Channel: Choose either Lower or Upper if you choose Auto

channel spacing.

•Unscheduled Automatic Power Save Delivery (U-APSD): Click Enable to

enable U-APSD to conserve the power, or click Disable to disable i t.

•SSID Isolation: Click Enable to enable the SSID Isolation feature so that the

SSIDs will be unable to see each other when the SSIDs belong to the same

VLAN, or click Disable to disable it. When you enable S SID Isolation (among

the SSIDs), traffic on one SSID will not be forwarded to any other SSID.

STEP 3 In the SSIDs area, all predefined SSIDs on the security appliance appear in the

table. You can configure the following properties for each predefined SSID:

•Enable: Check this box to enable a SSID, uncheck this box to disable a SSID.

By default, all SSIDs are disabled.

•SSID Name: Enter the name for a SSID.

•SSID Broadcast: Check this box to broadcast the SSID in its beacon frames.

All wireless devices within range are able to see the SSID when they scan

for available networks. Uncheck this box to prevent auto-detection of the

SSID. In this case, users must know the SSID to set up a wireless connection

to this SSID.

NOTE: Disabling SSID Broadcast is sufficient to prevent clients from

accidentally connecting to your network, but it will not prevent even the

simplest of attempts by a hacker to connect or monitor unencrypted traffic.

Suppressing the SSID broadcast offers a very minimal level of protection on

an otherwise exposed network (such as a guest network) where the priority

is making it easy for clients to get a connection and where no sensitive

information is available.

•Security Mode: Displays the security mode currently used for the SSID. To

configure the security settings for the SSID, click the Edit (pencil) icon. See

Configuring Wireless Security, page 211.

•MAC Filtering: Shows if the MAC Filtering feature is enabled or disabled on

the SSID. MAC Filtering can permit or block access to the SSID by the MAC

(hardware) address of the requesting device. To configure the MAC Filtering

settings for the SSID, click the Edit (pencil) icon. See Controlling Wireless

Access Based on MAC Addresses, page217.