Nortel 120 Using Manual page 58

58 System configuration management
Using IEEE 802.1X and a central RADIUS server, up to 64 VLAN IDs can
be mapped to specific wireless clients, so users can remain within the same
VLAN as they move around a campus site. This feature can also be used to
control access to network resources from clients, thereby improving security.
A VLAN ID (1-4094) can be assigned to a client after successful IEEE
802.1X authentication. The client VLAN IDs must be configured on the
RADIUS server for each user authorized to access the network. If a client
does not have a configured VLAN ID on the RADIUS server, the access point
assigns the client to the configured default VLAN ID for the VAP interface.
When setting up VLAN IDs for each user on the RADIUS server, be sure to
use the RADIUS attributes and values as indicated in the following table:
RADIUS attributes and values
Number
64
65
81
VLAN IDs on the RADIUS server can be entered as hexadecimal digits
or a string.
Copyright © 2006, Nortel Networks
.
Note: Before enabling VLAN tagging on the access point, be sure to
configure the attached network switch port to support tagged VLAN
frames from the access point management VLAN ID, default VLAN IDs,
and other client VLAN IDs. Otherwise, connectivity to the access point
is lost when you enable the VLAN feature.
Note: When using IEEE 802.1X to dynamically assign VLAN IDs, the
access point must have 802.1X authentication enabled and a RADIUS
server configured. Wireless clients must also support 802.1X client
software.
RADIUS attribute
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-ID
Note: The specific configuration of RADIUS server software is beyond
the scope of this guide. For more information, see the documentation
provided with the RADIUS server software.
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
BAP120
Value
VLAN (13)
802
VLANID(1 to 4094 as
hexadecimal or string)
Nortel Networks Confidential