NETGEAR ProSafe WNAP320 Reference Manual page 42

Table 9. Authentication Settings of the Edit Security Profile Screen (Continued)
Field
Network Authentication
and
Data Encryption
(continued)
Wireless Client Security
Separation
Dynamic VLAN
VLAN ID
42 | Chapter 3. Wireless Configuration and Security
ProSafe Wireless-N Access Point WNAP320 Reference Manual
Description
WPA2-PSK Select this only if all clients support WPA2. If selected, you
must use AES and TKIP + AES encryption and enter a
WPA passphrase (network key).
See Configure WPA-PSK, WPA2-PSK, and WPA-PSK &
WPA2-PSK
WPA-PSK and Select this setting to allow clients to use either WPA (with
WPA2-PSK TKIP) or WPA2 (with AES). If selected, you must use TKIP
+ AES encryption and enter a WPA passphrase (network
key).
See Configure WPA-PSK, WPA2-PSK, and WPA-PSK &
WPA2-PSK
If you enable wireless client security separation by selecting Enable from the
drop-down list, the associated wireless clients are not be able to communicate
with each other. By default, Disable is selected from the drop-down list. This
feature is intended for hotspots and other public access situations.
From the drop-down list, select how VLANs operate by making one of the
following selections:
• Disable. Disables dynamic VLANs, and enables static VLANs. This is the
default setting.
• Optional. Enables dynamic VLANs but if a RADIUS server does not return a
VLAN ID, the wireless station is still allowed to connect to the wireless access
point.
• Required. Enables dynamic VLANs. If a RADIUS server does not return a
VLAN ID, the wireless station is not authenticated and cannot connect to the
wireless access point.
For dynamic VLANs to operate (that is, the selection is Optional or Required),
the following is required:
• The hubs and switches on your LAN must support the VLAN (802.1Q)
standard.
• The authentication is set to any RADIUS type authentication: either the
network authentication in the wireless security profile or the remote MAC
address database authentication for the MAC Authentication feature can be
used.
Enter the default VLAN ID that must be associated with this wireless security
profile. The default VLAN ID is 1. The VLAN ID must match the VLAN ID that is
used by the other devices in your network.
on page 46.
on page 46.