Ruckus Wireless ZoneDirector 1100 User Manual page 178

Managing Access Points
Working with Access Point Groups
Figure 104. Enabling Guest VLAN and Dynamic VLAN on a MAC-based 802.1X
AP Ethernet port as Supplicant
You can also configure a port to act as a supplicant and force it to authenticate itself to an
upstream authenticator port. Until the AP has successfully done so, the state of the authenti-
cator port is closed and packets from the AP or stations behind it will be dropped at the
authenticator port.
In this configuration, it is expected that the connected authenticator port is configured with
the following characteristics:
• As a Trunk Port to pass all VLAN packets, and
• In port-based authentication mode
Each AP is allowed to configure a maximum of one Ethernet port as an 802.1X supplicant, and
the supplicant port must be a Trunk Port.
Authenticator port
166