Management Vlan, Typical User Vlan Configurations | Proxim AP-700

Advanced Configuration

AP-700 User Guide

SSID/VLAN/Security

Typical User VLAN Configurations

VLANs segment network traffic into workgroups, which enable you to limit broadcast and multicast traffic. Workgroups enable clients from different VLANs to access different resources using the same network infrastructure. Clients using the same physical network are limited to those resources available to their workgroup.

The AP can segment users into a maximum of 16 different workgroups per radio, based on an SSID/VLAN grouping (also referred as a VLAN Workgroup or a Sub-network).

The primary scenarios for using VLAN workgroups are as follows:

1.VLAN disabled: Your network does not use VLANs, and you cannot configure the AP to use multiple SSIDs.

2.VLAN enabled, each VLAN workgroup uses a different VLAN ID Tag.

3.VLAN enabled, a mixture of Tagged and Untagged workgroups exist.

4.VLAN enabled, all VLANs untagged: VLAN is enabled in order to use SSID. (Note that typical use of SSIDs assumes actual use of VLANs.)

NOTE: VLAN must be enabled to configure security per SSID.

Management VLAN

Figure 4-37 Mgmt VLAN

VLAN Tagging Management

Control Access to the AP

Management access to the AP can easily be secured by making management stations or hosts and the AP itself members of a common VLAN. Simply configure a non-zero management VLAN ID and enable VLAN to restrict management of the AP to members of the same VLAN.

CAUTION: If a non-zero management VLAN ID is configured then management access to the AP is restricted to wired or wireless hosts that are members of the same VLAN. Ensure your management platform or host is a member of the same VLAN before attempting to manage the AP.

1.Click Configure > SSID/VLAN/Security > Mgmt VLAN.

2.Set the VLAN Management ID to a value of between 1 and 4094. (A value of -1 disables VLAN Tagging).

105

Image 105

Proxim AP-700 manual Management Vlan, Typical User Vlan Configurations, Control Access to the AP, 105

Contents

ORiNOCO AP-700 Access Point User Guide Trademarks CopyrightOpenSSL License Note AP-700 User Guide Contents Management Contents AP-700 User Guide Commands TroubleshootingMonitoring General Notes Command Line Interface CLI Statement of Warranty Ascii Character Chart C SpecificationsTechnical Support Regulatory Compliance AP-700 User Guide Introduction to Wireless Networking IntroductionDocument Conventions Ieee 802.11 Specifications Guidelines for RoamingIntroduction AP-700 User Guide Command Line Interface Management and Monitoring CapabilitiesHTTP/HTTPS Interface Snmp Management SSH Secure Shell ManagementSNMPv3 Secure Management Page Installation and Initialization AP-700 Hardware DescriptionOverview Installation and Initialization AP-700 User Guide AntennasExternal Antennas Active Ethernet LED Indicators Prerequisites Installation and Initialization AP-700 User Guide System Requirements Product Package Hardware Installation Required MaterialsCabling the AP-700 Installing the Security Cover Mounting the AP-700Mounting the AP-700 to a Ceiling AP-700 Mounting Plate Mounting the AP-700 to a Wall Installing External Antennas Opening the Antenna Compartment Installing the AP in a Plenum Using ScanTool InitializationScanTool Instructions Scan List Enter Network Password screen appears Click LAN SettingsLogging Select Tools Internet Options 11 System Status Screen Using the Setup Wizard 12 Setup Wizard Setup Wizard Instructions Installing the Software Click Commands Update AP via Http Install Software with Http Interface Install Software with Tftp Server Click Commands Reboot Related Topics Install Updates from your Tftp Server using the CLI System Status Screen System Status Advanced Configuration Configure Main Screen Advanced Configuration AP-700 User Guide Dynamic DNS Support SystemPage Network IP Configuration Dhcp Server DNS ClientAdvanced Advanced Configuration AP-700 User Guide Network Start IP Address End IP AddressComment optional Dhcp Relay Agent Dhcp Server IP Address Table Dhcp Relay Agent Target IP Address Comment optional Link Integrity Sntp Simple Network Time Protocol Link Integrity Configuration Screen Sntp Configuration Screen Advanced Configuration AP-700 User Guide Network Interfaces Operational Mode Super Mode and Turbo Mode Advanced Configuration AP-700 User Guide InterfacesConfiguring 802.11d Support Ieee 802.11d Support for Additional Regulatory Domains Configuring TX Power Control TX Power Control/Transmit Power Level 10 Wireless Interface Wireless 802.11a/b/g RadioPage Affected Countries Dynamic Frequency Selection/Radar Detection DFS/RD RTS/CTS Medium Reservation Wireless Service Status Click on Configure Interfaces Wireless Traps Generated During Wireless Service Shutdown and ResumeSet Blacklist Status to Enable Channel Blacklist Table Bridging WDS 13 WDS Example 14 WDS Configuration WDS Setup Procedure 15 Adding WDS Links Ethernet 16 Ethernet Sub-tab Management Passwords IP Access Table ServicesSecure Management Snmp Settings Advanced Configuration AP-700 User Guide ManagementHttp Access Https Access Secure Socket Layer 17 Management Services Configuration Screen SSH Session Setup Configuring SSHSSH Clients Uploading Externally Generated Host Keys Click Commands Update AP via Http or via Tftp Radius Based Management Access Serial Configuration Settings Automatic Configuration AutoConfig Auto Configuration and the CLI Batch FileSet up Automatic Configuration for Static IP Set up Automatic Configuration for Dynamic IP 19 Automatic Configuration Screen 20 Dhcp Options Setting the Boot Server Host Name Hardware Configuration Reset Chrd Configuration Reset via Serial Port During Bootup Configuring Hardware Configuration ResetClick Configure Management Chrd Procedure to Reset Configuration via the Serial Interface Ethernet Protocol FilteringStatic MAC Select the Filter Operation Type Advanced Configuration AP-700 User Guide Filtering Wireless MAC Address 00022D5194E4 Wired MAC Address 0040F41CDB6AWired MAC Address Wireless MAC Address 0020A6124E38 TCP/UDP Port AdvancedNumber Click Add under the TCP/UDP Port Filter Table heading Click Edit under the TCP/UDP Port Filter Table heading Editing TCP/UDP Port Filters Groups Alarms Operational Trap Group Trap Name Description Severity Level Security Trap Group Trap Name Description Severity Level Flash Memory Trap Group Trap Name Description Severity Level Trap Name Description Severity Level Tftp Trap Group Trap Name Description Severity Level Alarm Host TableImage Trap Group Trap Name Description Severity Level Sntp Trap Group Trap Name Description Severity Level Advanced Configuration AP-700 User Guide Alarms Configuring Syslog Event Notifications SyslogEvent Priority Description Syslog Message Name Priority Severity Description Syslog Messages Advanced Configuration AP-700 User Guide 25 Preventing Rogue AP Attacks Rogue Scan Background Scanning Mode Continuous Scanning ModeMulti-Band Scanning Rogue Scan Data Collection Rogue Scan Click Configure Alarms Rogue Scan 26 Rogue Scan Screen Spanning Tree Bridge Storm Threshold Advanced Configuration AP-700 User Guide Bridge Configuring Interfaces for Packet Forwarding Intra BSSPacket Forwarding Click Configure QoS Policy Wireless Multimedia Extensions WME/Quality of Service QoSQoS Enabling QoS and Adding QoS policies Enter the Priority Mapping Index Advanced Configuration AP-700 User Guide QoS Priority Mapping Click Configure QoS Priority Mapping STA Edca Table and AP Edca Table Enhanced Distributed Channel Access Edca 32 Edca Tables Advanced Configuration AP-700 User Guide QoS Radius Profiles Radius Servers per Authentication Mode and per Vlan Radius Servers Enforcing Vlan Access Control Configuring Radius Profiles Advanced Configuration AP-700 User Guide 35 Add Radius Server Profile MAC Access Control Via Radius Authentication 802.1x Authentication using RadiusRadius Accounting Authentication Attributes Accounting Attributes101 102 SSID/VLAN/Security Vlan Overview103 104 Control Access to the AP Typical User Vlan ConfigurationsClick Configure SSID/VLAN/Security Mgmt Vlan Management Vlan Provide Access to a Wireless Host in the Same Workgroup Disable Vlan TaggingSecurity Profile Authentication Process Advanced Configuration AP-700 User Guide SSID/VLAN/SecurityWi-Fi Protected Access WPA/802.11i WPA2 107 108 Authentication Protocol Hierarchy Click Configure SSID/VLAN/Security Security Profile Configuring Security ProfilesVLANs and Security Profiles 109 WEP Station Non Secure Station802.1x Station WPA Station 111 40 Security Profile Table Add Entries 112 MAC Access Wireless113 114 Configuring an SSID/VLAN with Vlan Tagging Disabled 115 43 SSID/VLAN Edit Entries Screen Vlan Tagging Disabled Configuring SSID/VLANs with Vlan Tagging Enabled Click SSID/VLAN/Security Wireless116 117 45 SSID/VLAN Edit Entries Screen Vlan Tagging Enabled 118 Broadcast Ssid and Closed System 119 Monitoring Monitoring AP-700 User Guide Version Icmp Monitoring Tab IP/ARP Table Learn Table Monitoring Tab Learn Table Radius 124 125 Monitoring AP-700 User Guide Interfaces 126 127 Station Statistics 128 Monitoring AP-700 User Guide Station Statistics Commands Introduction to File Transfer via Tftp or Http129 Tftp File Transfer Guidelines Image Error Checking During File TransferHttp File Transfer Guidelines 130 Update AP via Tftp Update APCommands AP-700 User Guide 131 Update AP via Http Commands AP-700 User Guide Update AP via Http132 Retrieve File Commands AP-700 User Guide Retrieve FileRetrieve File via Tftp 133 134 Retrieve File via Http Retrieve File via Http Command Screen Reboot ResetCommands AP-700 User Guide Reboot Help Link 13 Help Link Configuration Screen 137 Troubleshooting Concepts TroubleshootingSymptoms and Solutions Connectivity Issues Basic Software Setup and Configuration Problems Client Connection Problems Active Ethernet AE Vlan Operation Issues Recovery Procedures Reset to Factory Default ProcedureForced Reload Procedure Download Procedure Download a New Image Using ScanToolPreparing to Download the AP Image 143 144 Download a New Image Using the Bootloader CLI Initializing the IP Address using CLI Setting IP Address using Serial PortHardware and Software Requirements Attaching the Serial Port Cable Related Applications Radius Authentication ServerTftp Server 146 147 Troubleshooting AP-700 User Guide Related Applications General Notes Command Line Interface CLIPrerequisite Skills and Knowledge Notation Conventions Navigation and Special Keys CLI Error Messages Bootloader CLI Command Line Interface CLI VariationsCommand Line Interface CLI AP-700 User Guide 150 CLI Command Types Operational CLI CommandsExample 1. Display Command list Example 2. Display specific Commands Example 3. Display parameters for set and showExample 3a. Display every parameter that can be changed Example 4. Display Prompts for Successive Parameters Example 3b. Display parameters based on letter sequenceDone, exit, quit Download History HelpPasswd 154 Show CLI Command Parameter Control CommandsSearch 155 Configuring Objects that Require Reboot Set CLI CommandSet and show Command Examples Examples Example 4 Enable, Disable, or Delete a table entry or row Example 1 Set the Access Point IP Address ParameterExample 2 Create a table entry or row Example 3 Modify a table entry or row Example 5 Show the Group Parameters Example 6 Show Individual and Table Parameters158 Using Strings Using Tables and StringsWorking with Tables 159 Set Basic Configuration Parameters using CLI Commands Configuring the AP using CLI commandsLog into the AP using HyperTerminal Log into the AP using Telnet Set Network Names for the Wireless Interface Change PasswordsSet System Name, Location and Contact Information 161 162 Country Code 163 Configure SSIDs Network Names, VLANs, and Profiles Download an AP Configuration File from your Tftp Server Other Network SettingsBackup your AP Configuration File Set up Auto Configuration Configure the DNS Client Configure the AP as a Dhcp Server Operational Mode Enable/Disable Closed SystemAutochannel Select ACS Enable/Disable Super Mode 802.11a/g only Shutdown/Resume Wireless ServiceEnable/Disable Turbo Mode 802.11a/g only Configure Antenna Diversity Edit Management IP Access Table Configure Management PortsSet Communication Ports Set Telnet Session Timeouts Configure Secure Socket Layer HttpsConfigure Serial Port Interface 169 Enable/Disable WDS Create/Enable WDSSetup MAC Address Access Control Add an Entry to the MAC Access Control Table Figure A-17 Result of showradiustbl CLI Command 171 Enable Vlan Management Disable Vlan ManagementAdd a Entry to the Wifssid Table CLI Monitoring Parameters 174 Parameter Tables 175 Filtering Parameters Set sysresettodefaults Name Type Value Access CLI ParameterSystem Parameters 176 Dhcp Server Parameters Name Type Value Access CLI Parameter DNS Client for Radius Name ResolutionNetwork Parameters 177 Dhcp Relay Group Dhcp Server table for IP poolsDhcp Relay Server Table 178 Sntp Parameters Name Type Value Access CLI Parameter Link Integrity IP Target Table179 Interface Parameters Wireless Interface ParametersCommon Parameters to 802.11a/b/g 180 181 802.11a Only Parameters 802.11b Only Parameters 802.11b/g Only Parameters182 For 802.11b/g mode For 802.11g-only modeFor 802.11b-only Mode Wireless Interface SSID/VLAN/Profile Parameters Wireless Distribution System WDS ParametersChannel Blacklist Parameters 184 Snmp Parameters Name Type Value Access CLI Parameter Wireless Distribution System WDS Security Table ParametersManagement Parameters 185 186 Http Parameters Name Type Value Access CLI Parameter Telnet Parameters Name Type Value Access CLI Parameter187 Radius Based Management Access Parameters Serial Port Parameters Name Type Value Access CLI ParameterSSH Parameters 188 IP Access Table Parameters Tftp Server Parameters189 Filtering Parameters Ethernet Filtering Table190 TCP/UDP Port Filtering Proxy ARP Parameters Name Type Value Access CLI ParameterTCP/UDP Port Filtering Table 191 Name Type Value Access CLI Parameter Syslog Group 192 Alarms ParametersSnmp Table Host Table Parameters Syslog Parameters 193 Syslog Host Table Bridge Parameters Spanning Tree Priority and Path Cost Table194 Intra BSS Subscriber Blocking Storm Threshold TablePacket Forwarding Parameters 195 Radius Parameters Radius Server Configuration ParametersGeneral Radius Parameters 196 Security Parameters MAC Access Control Table VLAN/SSID Parameters Security Profile Table198 Enabling QoS Name Type Value Access CLI Parameter Iapp Parameters Name Type Value Access CLI ParameterConfiguring QoS Policies Other Parameters 200 Specifying the Mapping between 802.1p and 802.1D Priorities Defining the QoS Policy used for a Wireless Interface Ssid CLI Batch File201 Auto Configuration and the CLI Batch File Reboot BehaviorCLI Batch File Format and Syntax 203 CLI Batch File Error Log Ascii Character Chart HexCharact Equival Ent 204 Software Features SpecificationsNumber of Stations per BSS Management Functions Specifications AP-700 User Guide Software Features Medium Access Control MAC FunctionsAdvanced Bridging Functions Security Functions Specifications AP-700 User Guide Network Functions207 Hardware Specifications Available Channels Mode Frequency Channel Product SKU Band802.11b/g 802.11a Upper 149 153 157 161 ISM Band 165 RF Performance 802.11a RF Performance 802.11a Data Rates Mbps210 Technical Support Online SupportSoftware and Documentation Downloads Knowledgebase 211 Telephone Support Technical Support AP-700 User Guide Telephone SupportInternational 212 Warranty Coverage Statement of WarrantyRepair or Replacement Limitations of Warranty Other Information Ask a Question or Open an IssueSearch Knowledgebase Other Adapter Cards Regulatory Compliance Product Model Numbers215 Safety Information USA, Canada, & European Union Regulatory Compliance AP-700 User Guide216 217 Federal Communications Commission FCC 218 Modifications 219 Industry Canada IC 220 European Union Regulatory Compliance Certifications Summary Country Certification/Reference No221