Prerequisites And Requirements - Avaya WLAN 8100 Technical Configuration Manual

VLAN mapping. WLAN 8100 will map the device to a VLAN that is separate from BYOD devices. There
will be no ACL or firewall applied to these WLAN client sessions, as access will not be restricted.
Note: Some organizations do prefer to apply firewall rules to all WLAN clients regardless of
authentication, or status. Avaya does not generally recommend this approach, because in common
practice, WLAN access is more secure than comparable LAN access, and LAN access policies generally
do not require firewalls. To be specific, WLAN is authenticated by 802.1x and secure Diffie-Helman based
protocols like PEAP; the typical LAN is not authenticated, but rather depends on building security (which
is fallible) to keep intruders out. WLAN is encrypted using high grade 256-bit AES ciphers which are
considered uncrackable with today's technology; The typical LAN is unencrypted and depends on building
security (which is fallible) and switching technology (which can be fooled by simple hacker tools) to
prevent eavesdropping. Arguably, your WLAN has better security implemented than your corporate LAN,
and therefore, the need for a firewall on top of that is questionable. There are also many alternative
options, such as using NAP to enforce firewall use on laptops.
You may want to consider deploying 802.1x based access to the LAN leveraging your

deployment of Identity Engines, however this is beyond the scope of this document and other
TCGs are available focusing on such deployments.

1.4 Prerequisites and Requirements

This feature set assumes the following minimum requirements are met:
•
Avaya WLAN AP 8120
•
Avaya WLAN Controller 8180
•
Avaya Identity Engines installed and running on a VMware ESXi server
•
Avaya Ignition Dashboard installed on a Windows-based PC
The configurations described in this guide used the following software and hardware versions:
•
Laptop with Windows XP with Service Pack 3.
•
Avaya WLAN Controller 8180 with software version 1.1.0.133 installed.
•
Avaya WLAN AP 8120s running the same version as the WC
•
Avaya Identity Engines version 7.0.1 or 7.0.2
•
Avaya Ignition Dashboard release 7.0.1 or 7.0.2 (matching the Ignition Server version)
•
Avaya Ethernet Routing Switch 5520 for PoE support of APs.
August 2011
Avaya Inc. –External Distribution
avaya.com
11