Configuring Management Vlan Example; Table 70 Radius Vlan - ZyXEL Communications NWA-3500 User Manual

The following table describes the labels in this screen.

Table 70 RADIUS VLAN

LABEL
Block station if
RADIUS server assign
VLAN name error!
VLAN Mapping Table
Index
ID
Name
Apply
Reset

16.2.3 Configuring Management VLAN Example

This section shows you how to create a VLAN on an Ethernet switch.
By default, the port on the ZyXEL Device is a member of the management VLAN (VLAN ID
1). The following procedure shows you how to configure a tagged VLAN.
Note: Use the out-of-band management port or console port to configure the switch if
you misconfigure the management VLAN and lock yourself out from performing
in-band management.
On an Ethernet switch, create a VLAN that has the same management VLAN ID as the
ZyXEL Device. The following figure has the ZyXEL Device connected to port 2 of the switch
and your computer connected to port 1. The management VLAN ID is ten.
ZyXEL NWA-3500 User's Guide
DESCRIPTION
Select this to have the ZyXEL Device forbid access to wireless clients when
the VLAN attributes sent from the RADIUS server do not match a configured
Name field.
When you select this check box, only users with names configured in this
screen can access the network through the ZyXEL Device.
Use this table to map names to VLAN IDs so that the RADIUS server can
assign each user or user group a mapped VLAN ID. See your RADIUS server
documentation for more information on configuring VLAN ID attributes.
See Section 16.2.4 on page 194
Select a check box to enable the VLAN mapping profile.
Type a VLAN ID. Incoming traffic from the WLAN is authorized and assigned
a VLAN ID before it is sent to the LAN.
Type a name to have the ZyXEL Device check for specific VLAN attributes on
incoming messages from the RADIUS server. Access-accept packets sent by
the RADIUS server contain VLAN related attributes. The configured Name
fields are checked against these attributes. If a configured Name field matches
these attributes, the corresponding VLAN ID is added to packets sent from this
user to the LAN.
If the VLAN-related attributes sent by the RADIUS server do not match a
configured Name field, a wireless station is assigned the wireless VLAN ID
associated with its SSID (unless the Block station if RADIUS server assign
VLAN error! check box is selected).
Click Apply to save your changes to the ZyXEL Device.
Click Reset to begin configuring this screen afresh.
Chapter 16 VLAN
for more information.
191