G-3000H User’s Guide

1When you configure your wireless credentials, the ZyAIR sends the information to the IAS server using RADIUS protocol.

2Authentication by the RADIUS server is successful.

3The RADIUS server sends three attributes related to this feature.

4The ZyAIR compares these attributes with the VLAN screen mapping table.

aIf the Name, if for example VLAN 20 is found, the mapped VLAN ID is used. If it is not found in the mapping table

bthe string in the Tunnel-Private-Group-IDattribute is considered as a number ID format, for example 2493. The range of the number ID (Name:string) is between 1 and 4094.

cIf a or b are not matched, the ZyAIR uses the VLAN ID configured in the SSID screen and the wireless station. This VLAN ID is independent and hence different to the ID in the VLAN screen.

9.2.2.1 Configuring VLAN Groups

To configure a VLAN group you must first define the VLAN Groups on the Active Directory server and assign the user accounts to each VLAN Group.

1Using the Active Directory Users and Computers administrative tool, create the VLAN Groups that will be used for each VLAN ID. One VLAN Group must be created for each VLAN defined on the ZyAIR. The VLAN Groups must be created as Global/Security groups.

•Type a name for the VLAN Group that describes the VLAN Group’s function.

•Select the Global Group scope parameter check box.

•Select the Security Group type parameter check box.

•Click OK.

Figure 60 New Global Security Group

2In VLAN Group ID Properties, click the Members tab.

118

Chapter 9 VLAN