Enterasys Networks RBT-4102 manual 5 VLAN ID RADIUS Attributes, Number, Value, Tunnel-Type, Vlan

Models: RBT-4102

1 168
Download 168 pages 49.88 Kb
Page 94
Image 94
Table 4-5 VLAN ID RADIUS Attributes

Radio Interface

Native VLAN ID is the VLAN ID for this default radio interface. The access point assigns this VLAN ID to all client traffic using this radio interface unless you assign unique VLAN IDs to clients through the RADIUS server using RFC 3580 (Section 3.31) tunnel attributes.

Using RFC 3580 (Section 3.31) tunnel attributes, you must configure user VLAN IDs (1‐4094) on the RADIUS server for each client authorized to access the network. The RADIUS server then assigns a VLAN ID to a client after successful authentication using IEEE 802.1x and a central RADIUS server. If a client does not have a configured VLAN ID, the access point assigns the client to the native VLAN ID for the radio interface. The default is 1.

When setting up VLAN IDs for each user on the RADIUS server, be sure to use the RADIUS attributes and values as indicated in Table 4‐5.

Table 4-5 VLAN ID RADIUS Attributes

Number

RADIUS Attribute

Value

 

 

 

64

Tunnel-Type

VLAN (13)

 

 

 

65

Tunnel-Medium-Type

802

 

 

 

81

Tunnel-Private-Group-ID

VLANID (1 to 4094 in hexadecimal)

 

 

 

Note: The specific configuration of RADIUS server software is beyond the scope of this guide. Refer to the documentation provided with the RADIUS server software.

Secure Access specifies whether clients can access the default radio interface network by discovering and automatically configuring the SSID, or whether clients must be already configured with the SSID. Default: Disable

Enable denies access to wireless clients that do not have the default radio interface network name (SSID) already configured. This default radio interface does not broadcast its network name, so that clients with operating systems like Windows XP do not see the name show up in wireless LAN configuration dialogs.

Disable broadcasts its network name, and clients can discover and use the SSID to access this default radio interface’s wireless network.

IBSS Relay: In conjunction with IBSS Relay Control settings (see Filter Control and VLANs on page 4‐18), controls whether clients associated with the default radio interface can establish wireless communications with each other through the AP. Default: Disable

If you enable IBSS Relay, clients can establish wireless communications with each other through the AP. If you set the IBSS Relay Control to All VAP, then clients associated with all IBSS enabled radio interfaces or VAPs can establish wireless communications with each other. If you set the IBSS Relay Control to Per VAP, only the clients associated with the same (IBSS enabled) radio interface or VAP can communicate with each other.

Maximum Associations (0‐255) specifies the number of clients allowed to associate with this radio interface.

Fixed Antenna Control selects the use of two diversity antennas or a single antenna. Default: Diversity

Diversity. The radio uses both antennas in a diversity system. Select this method when the Antenna ID is set to “Default Antenna” to use the access pointʹs integrated antennas. The access point does not support external diversity antennas.

4-58 Advanced Configuration

Page 94
Image 94
Enterasys Networks RBT-4102 manual 5 VLAN ID RADIUS Attributes, Number, Value, Tunnel-Type, Vlan, Tunnel-Medium-Type