Stand-Alone Deployment; Ap Deployed With An Alvarion Service Controller - Alvarion BreezeACCESS Wi2 System Manual

5.4.1

Stand-alone Deployment

5.4.1.1 Virtual Network on Autonomous AP
5.4.1.1.1 Ingress
The AP only handles wireless traffic. The SSID is the name of the wireless network that the user
associates with.
5.4.1.1.2 Features
Authentication: Authentication can be either 802.1X or MAC. To validate user credentials the
AP makes use of an external RADIUS server, which can be the service controller or a
third-party device. For more information, see
Server" on page
Wireless security filters: Enables the AP to block traffic unless it is addressed to a specific
device (like the service controller). For more information, see
page
Wireless MAC filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user MAC addresses.
Wireless IP filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user IP addresses.
5.4.1.1.3 Egress
Bridge onto port 1+2: Unless a centralized mode tunnel has been established, user and
authentication traffic is bridged onto ports 1 and 2.
VLAN: All traffic on port 1 or 2 can be assigned to a VLAN.
5.4.2

AP deployed with an Alvarion Service Controller

5.4.2.1 Ingress
The AP only handles wireless traffic. The SSID is the name of the wireless network that the user
associates with.
5.4.2.2 Features
Authentication: Authentication can either 802.1X or MAC. To validate user credentials the AP
makes use of the service controller. For more information, see
Using a RADIUS Server" on page
BreezeMAX Wi² and BreezeACCESS Wi² System Manual
135.
81.
"Authenticating Administrators Using a RADIUS
135.
Virtual Network Data Flow
"Wireless Security Filters" on
"Authenticating Administrators
87