Vlan; Filtering - Proxim ORiNOCO AP-8000 User Manual

Using Web Interface to Manage the Access Point
Configuring the Device

VLAN

VLANs segment network traffic into workgroups, which enable you to limit broadcast and multicast traffic. Workgroups
enable clients from different VLANs to access different resources using the same network infrastructure. Clients using the
same physical network are limited to those resources available to their workgroup.
The AP can segment users into a maximum of 4 different workgroups per radio. Therefore total of 8 different
workgroups/VLANs for dual radio.
Figure 6-25 VLAN Page
Management access to the AP can easily be secured by making management stations and hosts and the AP itself
members of a common VLAN. Simply configure a non-zero management VLAN ID and enable VLAN to restrict
management of the AP to members of the same VLAN.
CAUTION: If a non-zero management VLAN ID is configured then management access to the AP is restricted to wired
or wireless hosts that are members of the same VLAN. Ensure your management platform or host is a
member of the same VLAN before attempting to manage the AP.
NOTE: When VLAN is enabled ensure that all devices in the network share the same VLAN ID as this will ensure that
the all the Access Points are managed easily.
NOTE: In the case of Radius server authentication or EAP authentication, if the radius server is present on any VLAN,
then the Radius server should be the member of management VLAN ID of an AP.
1. Navigate to Configuration > VLAN.
2. Place a check mark in the Status box. This will enable the VLAN feature for the device.
NOTE: To Disable the VLAN, uncheck the Status checkbox and click COMMIT button to update the changes.
3. Set the VLAN Management Identifier to a value of between 1 and 4094. (A Value of -1 disables the VLAN Tagging).
4. Click OK.
5. Click COMMIT.
CAUTION: You need to click Commit button to update/reflect the changes. If you do not click Commit, then the device
will not be able tag the incoming wireless packets.

Filtering

The Access Point's Packet Filtering features help control the amount of traffic exchanged between the wired and wireless
networks. If the global flag for Filtering is not enabled on the device, then none of the filtering configuration can be
applied.
There are four sub-headings under the Filtering heading:
• Intra BSS Filtering
• Protocol Filtering
• Static MAC Address Filtering
AP-8000 User Guide
73