Cisco WAP581 Administration Manual page 62

Configuring VAPs
• SSID Broadcast — Enables and disables the broadcast of the SSID.
Specify whether to allow the WAP device to broadcast the SSID in its beacon frames. The Broadcast SSID parameter
is enabled by default. When the VAP does not broadcast its SSID, the network name is not shown in the list of
available networks on a client station. Instead, you must manually enter the exact network name into the wireless
connection utility on the client so that it can connect.
Disabling the broadcast SSID is sufficient to prevent clients from accidentally connecting to your network, but it
does not prevent even the simplest of attempts by a hacker to connect or monitor unencrypted traffic. Suppressing
the SSID broadcast offers a very minimal level of protection on an otherwise exposed network (such as a guest
network) where the priority is to make it easy for clients to get a connection and where no sensitive information is
available.
WMF — The Wireless Multicast Forwarding provides an efficient way to transfer multicast traffic on the wireless
device and overcome multicast transmission issues on the WLAN using the repeated unicast or multicast the frames.
• Security — Choose the type of authentication required for access to the VAP. The options are:
• None
• WPA Personal
• WPA Enterprise
If you choose a security mode other than None, additional fields appear. For more information on configuring the wireless
security settings, see
We recommend using WPA Personal or WPA Enterprise as the authentication type as it provides stronger security
protection.
Static WEP can be used for wireless computers or devices that do not support WPA Personal and WPA Enterprise.
Note
To set security with Static WEP, configure the radio as 802.11a or 802.11b/g mode. The 802.11n mode restricts
the use of Static as the security.
• Client Filter — Specifies whether the stations that can access the VAP are restricted to a configured global list of
MAC addresses. You can choose one of these types of Client filter:
• Disabled — Does not use the Client filter.
• Local — Uses the MAC authentication list that is configured on the Client Filter page.
• RADIUS — Uses the MAC authentication list on an external RADIUS server.
• Channel Isolation — Check to enable the channel isolation.
When disabled, the wireless clients can communicate with one another normally by sending traffic through the WAP
device.
When enabled, the WAP device blocks communication between the wireless clients on the same VAP. The WAP
device still allows data traffic between its wireless clients and the wired devices on the network, across a WDS link,
and with other wireless clients associated with a different VAP, but not among the wireless clients
• Band Steer — Check to enable the band steer when both the radios are up. It effectively utilizes the 5-GHz band
by steering dual-band supported clients from the 2.4-GHz band to the 5-GHz band.
• It is configured on a per-VAP basis and needs to be enabled on both the radios.
• It is not encouraged on the VAPs with time-sensitive voice or video traffic.
Cisco WAP581 Wireless-AC/N Dual Radio Access Point with 2.5GbE LAN Administration Guide
52
Configuring Security Settings.
Wireless