Ruckus Wireless ZoneDirector 1100 User Manual page 130

Managing a Wireless Local Area Network
Creating a WLAN
"Local Database"), you will need to point ZoneDirector to the proper authentication server
configured on the Configure > AAA Servers page (see
Authentication"
• Wireless Client Isolation: Wireless client isolation enables subnet restrictions for connected
clients. Options are:
• None: Clients associated with this WLAN are not isolated and have full access to
communicate with each other and any other nodes on the local network.
• Local: Clients can not communicate with each other on the same WLAN, but can access
other resources on the local network. When you configure Local client isolation, isolation
is made using Layer 2 but applies only to clients connected to the same radio and SSID
on the same AP.
• Full: When full wireless client isolation is enabled, stations associated to this WLAN will
not be able to communicate with each other or access the local LAN; rather, they can
only access the Internet. Access controls will be exactly the same as for those that
associate to a guest WLAN -- the same guest policy will be applied to a guest WLAN
as to a WLAN with wireless client isolation enabled. When you configure Full client
isolation, isolation is made using a Layer 3 ACL. This L3 ACL is defined in the Guest
Access tab, which blocks all traffic to private (10.x, 192.x, etc.) IP addresses by
default.The only difference between a WLAN with wireless client isolation enabled and
a guest WLAN is that a guest WLAN requires users to enter a guest pass before they
can access the network. To restrict access to certain subnets, see
Subnet Access"
CAUTION: The SpeedFlex wireless performance tool may not work properly if wireless client
isolation is enabled on the WLAN. For example, SpeedFlex may be inaccessible to users at
http://{zonedirector-ip-address}/perf or SpeedFlex may prompt you to install the
SpeedFlex application on the target client, even when it is already installed.
• Zero-IT Activation: Enable this option to activate ZoneDirector's share in the automatic
"new user" process, in which the new user's PC is easily and quickly configured for WLAN
use. For more information, see
page
• Dynamic PSK: Dynamic PSK is available when you have enabled Zero-IT Activation. When
a client is activated, ZoneDirector provisions the user with a pre-shared key. This per-user
key does not expire by default. If you want to set an expiration for Dynamic PSKs, you can
do so from the drop-down menu further down the page. For more information, see
"Working with Dynamic Pre-Shared Keys"
• Priority: Set the priority of this WLAN to Low if you would prefer that other WLAN traffic
takes priority. For example, if you want to prioritize internal traffic over guest WLAN traffic,
you can set the priority in the guest WLAN configuration settings to "Low." By default all
WLANs are set to high priority.
on page 212).
on page 227.
202.
"Enabling Automatic User Activation with Zero-IT"
on page 146.
"Using an External Server for User
"Configuring Guest
on
118