Vlan Support - Extreme Networks Altitude 4700 Series Product Reference Manual

Introduction
For detailed information on WPA2-CCMP, see "Configuring WPA2-CCMP (802.11i)" on page 213.
Firewall Security
A firewall keeps personal data in and hackers out. The Access Point's firewall prevents suspicious
Internet traffic from proliferating the Access Point managed network. The Access Point performs
Network Address Translation (NAT) on packets passing to and from the WAN port. This combination
provides enhanced security by monitoring communication with the wired network.
For detailed information on configuring the Access Point's firewall, see "Configuring Firewall Settings"
on page 218.
VPN Tunnels
Virtual Private Networks (VPNs) are IP-based networks using encryption and tunneling providing users
remote access to a secure LAN. In essence, the trust relationship is extended from one LAN across the
public network to another LAN, without sacrificing security. A VPN behaves like a private network;
however, because the data travels through the public network, it needs several layers of security. The
Access Point can function as a robust VPN gateway.
For detailed information on configuring VPN security support, see "Configuring VPN Tunnels" on
page 225.
Content Filtering
Content filtering allows system administrators to block specific commands and URL extensions from
going out through the WAN port. Therefore, content filtering affords system administrators selective
control on the content proliferating the network and is a powerful screening tool. Content filtering
allows the blocking of up to 10 files or URL extensions and allows blocking of specific outbound HTTP,
SMTP, and FTP requests.
For detailed information on configuring content filtering support, see "Configuring Content Filtering
Settings" on page 240.

VLAN Support

A Virtual Local Area Network (VLAN) can electronically separate data on the same AP from a single
broadcast domain into separate broadcast domains. By using a VLAN, you can group by logical
function instead of physical location. There are 16 VLANs supported on the Access Point. An
administrator can map up to 16 WLANs to 16 VLANs and enable or disable dynamic VLAN
assignment. In addition to these 16 VLANs, the Access Point supports dynamic, user-based, VLANs
when using EAP authentication.
VLANs enable organizations to share network resources in various network segments within large areas
(airports, shopping malls, etc.). A VLAN is a group of clients with a common set of requirements
independent of their physical location. VLANs have the same attributes as physical LANs, but they
enable administrators to group clients even when they are not members of the same network segment.
For detailed information on configuring VLAN support, see "Configuring VLAN Support" on page 126.
Altitude 4700 Series Access Point Product Reference Guide
30