Proxim ORiNOCO AP-800 Installation And Management Manual page 73

When a station tries to connect to an AP device, the AP device forwards the request to the RADIUS Server (a
central storage of pre- configured user profiles). On receiving the request from the AP device, the RADIUS server
authenticates on what the station is authorized to do. On successful authentication, the RADIUS Server sends an
acknowledgment with the following vendor specific attributes (pre-configured within the RADIUS server):
a. Tunnel Pvt-Group ID: Specifies the value of the VLAN ID assigned to the station.
b. Tunnel Type: Specifies the type of the network mode, that is the VLAN mode.
c. Tunnel Medium Type: Specifies the 802 medium, that includes all the 802 standard media.
Hence, every station under a VAP network, is assigned a specific VLAN ID, based on the three vendor specific
attributes. By default, this parameter is disabled. To enable, check the Radius VLAN Status box. VLAN Status
should also be enabled, failing which the device will not perform the VLAN assignment functionality.
: When RADIUS VLAN is enabled, it is recommended to use only one VAP (only for the first SSID) per radio.
This will avoid interference between different VAPs with untagged broadcasted traffic.
When the RADIUS VLAN is enabled, it is strongly recommended to configure the
VLAN-Ethernet in Trunk mode. This helps in reducing the risk of interference by sending the
VLAN traffic (broadcast/multicast) only to the intended wireless clients.
•
Management VLAN ID: Specifies the Management VLAN ID. The management stations must tag the
management frames which they send to the device with the management VLAN ID. By default, the Management
VLAN ID is set to -1 which indicates no tag is added to the management frame. To enable Management VLAN
ID, enter a value ranging from 1 to 4094.
: If a non-zero management VLAN ID is configured then management access to the device is restricted to
wired or wireless hosts that are members of the same VLAN. Ensure your management platform or host is
a member of the same VLAN before attempting to manage the device.
ORiNOCO® AP-800 and AP-8000 Installation and Management Guide
Figure 3-32 Configuring RADIUS server attributes
Device Configuration Using Web Interface
73