NETGEAR ProSafe WC7520 Reference Manual page 28

Client VLANs
Each authenticated wireless user is placed into a VLAN that determines the user's DHCP
server, IP address, and Layer 2 connection. Although you could place all authenticated
wireless users into the single VLAN that is specified in the basic security profile, the wireless
controller allows you to group wireless users into separate VLANs based on the wireless
SSID to differentiate access to network resources. For example, you might place authorized
employee users into one VLAN, and itinerant users, such as contractors or guests, into a
separate VLAN. To use different VLANs, you need to create different security profiles.
For information about how to configure regular VLANs, see
page 107.
DHCP Server
The wireless controller can function as a DHCP server and assign IP addresses to both
wireless and wired devices that are connected to it. You can add up to 64 DHCP server pools,
each assigned to a different VLAN.
Client Authentication and Data Encryption
A user needs to authenticate to the WLAN to be able to access WLAN resources. The
wireless controller supports several types of security methods, including those that require an
external RADIUS or LDAP authentication server.
The encryption option that you can select depends upon the authentication method that you
have selected. The following table lists the authentication methods available, with their
corresponding encryption options:
Table 2. Authentication and encryption options
Authentication method
Open system
Shared Key
WPA-PSK
WPA2-PSK
WPA-PSK and WPA2-PSK
WPA
ProSafe 20-AP Wireless Controller WC7520
Encryption option
64-bit, 128-bit, or 152-bit WEP None
64-bit, 128-bit, or 152-bit WEP None
TKIP or TKIP+AES
AES or TKIP+AES
TKIP+AES
TKIP or TKIP+AES
System Planning and Deployment Scenarios
28
Manage Rogue Access Points
Authentication server
None
None
None
One of the following authentication servers:
• External RADIUS server
• Internal authentication server
• External LDAP server
on