Vlan - Nortel 120 Using Manual

56 System configuration management
Uplink Port MAC Address Filtering Status—Allows traffic with specified
source MAC addresses being forwarded to wireless clients through the
access point. You can add a maximum of eight MAC addresses to the filter
table. When MAC address filtering is enabled, only traffic with a source
address specified in the filtering table is forwarded to the wireless clients.
(Default: Disabled)
•
•
Ethernet Type Filter—Controls checks on the Ethernet type of all incoming
and outgoing Ethernet packets against the protocol filtering table. (Default:
Disabled)
•
•

VLAN

The access point can employ VLAN tagging support to control access to
network resources and increase security. VLANs separate traffic passing
between the access point, associated clients, and the wired network.
There can be a VLAN assigned to each associated client, a default VLAN
for each VAP (Virtual Access Point) interface, and a management VLAN
for the access point.
Note the following points about the VLAN support for the access point:
•
•
Copyright © 2006, Nortel Networks
.
MAC Address: Specifies a MAC address to filter, in the form
xx-xx-xx-xx-xx-xx.
Permission: Adds or deletes a MAC address from the filtering table.
Disabled: Access point does not filter Ethernet protocol types.
Enabled: Access point filters Ethernet protocol types based on the
configuration of protocol types in the filter table. If the status of a protocol
is set to ON, the protocol is filtered from the access point.
Note: Ethernet protocol types not listed in the filtering table are always
forwarded by the access point.
The management VLAN is for managing the access point through
remote management tools, such as the Web interface or SNMP. The
access point only accepts management traffic that is tagged with the
specified management VLAN ID.
If VLAN classification is enabled, a VLAN ID is assigned to the wireless
clients associated to the access point:
— When 802.1X is used to authenticate a wireless client, the VLAN
ID of the wireless client can be configured on the RADIUS server
and returned to the access point.
— If the RADIUS server does not assign a VLAN ID or if 802.1X
authentication is not used, then a default VLAN ID is assigned to
the wireless client. This assignment is based on the configuration
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
BAP120
Nortel Networks Confidential