Chapter 20 VLAN

Table 80 VLAN > RADIUS VLAN

LABEL

DESCRIPTION

 

 

Name

Type a name to have the NWA check for specific VLAN attributes on

 

incoming messages from the RADIUS server. Access-accept packets

 

sent by the RADIUS server contain VLAN related attributes. The

 

configured Name fields are checked against these attributes. If a

 

configured Name field matches these attributes, the corresponding

 

VLAN ID is added to packets sent from this user to the LAN.

 

If the VLAN-related attributes sent by the RADIUS server do not

 

match a configured Name field, a wireless station is assigned the

 

wireless VLAN ID associated with its SSID (unless the Block station

 

if RADIUS server assign VLAN error! check box is selected).

 

 

Apply

Click Apply to save your changes to the NWA.

 

 

Reset

Click Reset to begin configuring this screen afresh.

 

 

20.5 Technical Reference

This section provides some technical background information and configuration examples about the topics covered in this chapter.

20.5.1 VLAN Tagging

The NWA supports IEEE 802.1q VLAN tagging. Tagged VLAN uses an explicit tag (VLAN ID) in the MAC header of a frame to identify VLAN membership. The NWA can identify VLAN tags for incoming Ethernet frames and add VLAN tags to outgoing Ethernet frames.

Note: You must connect the NWA to a VLAN-aware device that is a member of the management VLAN in order to perform management. See the Configuring Management VLAN example BEFORE you configure the VLAN screens.

20.5.2 Configuring Management VLAN Example

This section shows you how to create a VLAN on an Ethernet switch.

By default, the port on the NWA is a member of the management VLAN (VLAN ID 1). The following procedure shows you how to configure a tagged VLAN.

Note: Use the out-of-band management port or console port to configure the switch if you misconfigure the management VLAN and lock yourself out from performing in-band management.

240

 

NWA-3500/NWA-3550 User’s Guide