Configuring Vlan Groups - ZyXEL Communications 802.11 a/g User Manual

Chapter 20 VLAN
ZyXEL uses the following standard RADIUS attributes returned from Microsoft's
IAS RADIUS service to place the wireless station into the correct VLAN:
Table 81 Standard RADIUS Attributes
ATTRIBUTE NAME
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-
ID
The following occurs under Dynamic VLAN Assignment:
When you configure your wireless credentials, the NWA sends the information to
1
the IAS server using RADIUS protocol.
Authentication by the RADIUS server is successful.
2
The RADIUS server sends three attributes related to this feature.
3
The NWA compares these attributes with the VLAN screen mapping table.
4
If the Name, for example "VLAN 20" is found, the mapped VLAN ID is used.
4a
If the Name is not found in the mapping table, the string in the Tunnel-
4b
Private-Group-ID attribute is considered as a number ID format, for
example 2493. The range of the number ID (Name:string) is between 1 and
4094.
If a or b are not matched, the NWA uses the VLAN ID configured in the
4c
WIRELESS VLAN screen and the wireless station. This VLAN ID is
independent and hence different to the ID in the VLAN screen.

20.5.3.1 Configuring VLAN Groups

To configure a VLAN group you must first define the VLAN Groups on the Active
Directory server and assign the user accounts to each VLAN Group.
1Using the Active Directory Users and Computers administrative tool, create the VLAN
Groups that will be used for each VLAN ID. One VLAN Group must be created for each
VLAN defined on the NWA. The VLAN Groups must be created as Global/Security groups.
Type a name for the VLAN Group that describes the VLAN Group's function.
1a
Select the Global Group scope parameter check box.
1b
Select the Security Group type parameter check box.
1c
244
TYPE VALUE
064 13 (decimal) – VLAN
065 6 (decimal) – 802
081 <vlan-name> (string) – either the Name you enter in
the NWA's VLAN > RADIUS VLAN screen or the
number. See Figure 161 on page 251.
NWA-3500/NWA-3550 User's Guide