Table of Contents
Advertisement
With built-in VPN capability, the AP110 allows a user to connect to and access the corporate
resources (wired and wireless) through a secure tunnel. The traffic from the phone connected
to the wired interface of the AP is tunneled back to the controller. Family members can use the
AP110 to access the Internet using a personal SSID configured in bridge mode.
Before giving an AP110 to a telecommuter, you must provision the AP110 for VPN. For
information about initial VPN provisioning, see
If the user loses the AP110 or leaves the organization without returning the AP, deprovision
the AP so that unauthorized users cannot access your network:
Remove the AP110 from the VPN group.
Remove the relevant ESS-AP entries.
Remove the relevant Port-AP table entries.
The following is configured for this use case:
A tunneled ESSID named "corporate" is created for corporate network access.
Corporate user security is applied to this ESSID.
The AP wired interface is part of the port profile named "corporate-wired," which is in
tunneled mode to the controller. The phone is connected to this AP interface.
A bridged ESSID named "personal" is created for home use. The traffic in this ESSID is
passed to the Internet locally. The security used is WPA2-PSK.
Use Case 2 Design Example: Using the AP1014i as a Telecommuter AP for
the Home Office
The requirements are almost the same as in Use Case 1. However, this use case requires that
multiple wired devices be associated to the same AP (for example, a printer in addition to the
phone). An employee must be able to easily send print jobs, while accessing email and other
corporate resources like file servers, without switching between SSIDs to connect to a local
printer. The bridged SSID for personal access to the Internet is also applicable for this use
case.
Figure 11
illustrates the use case example.
22
For use by Meru Networks authorized partners and customers.
VPN
Provisioning.
Advertisement
Table of Contents
