Nac Support For Mbssid - Allen-Bradley Stratix 5100 User Manual

Chapter 8 Configuring Multiple SSIDs

NAC Support for MBSSID

294
Beginning in privileged EXEC mode, follow these steps to include an SSID in an
SSIDL IE:
1. Enter global configuration mode.
configure terminal
2. Enter interface configuration mode for the radio interface.
• The 2.4 GHz radio and the 2.4 GHz 802.11n radio is 0.
• The 5 GHz radio and the 5 GHz 802.11n radio is 1.
interface dot11radio { 0 | 1 }
3. Enter configuration mode for a specific SSID.
ssid ssid-string
4. Include an SSIDL IE in the access point beacon that advertises the
extended capabilities for the access point, such as 802.1x and support for
Microsoft Wireless Provisioning Services (WPS).
Use the advertisement option to include the SSID name and capabilities in
the SSIDL IE. Use the wps option to set the WPS capability flag in the
SSIDL IE.
information-element ssidl [advertisement] [wps]
Use the form of the command to disable SSIDL IEs.
no
Networks must be protected from security threats, such as viruses, worms, and
spyware. These security threats disrupt business, causing downtime and continual
patching. Endpoint visibility and control is needed to help verify that all wired
and wireless devices attempting to access a network meet corporate security
policies. Infected or vulnerable endpoints need to be automatically detected,
isolated, and cleaned.
NAC is designed specifically to help to make sure that all wired and wireless
endpoint devices (such as personal computers, laptops, servers, and PDAs)
accessing network resources are adequately protected from security threats. NAC
lets organizations analyze and control all devices coming into the network. By
ensuring that every endpoint device complies with corporate security policy and
is running the latest and most relevant security protections, organizations can
significantly reduce or eliminate endpoint devices as a common source of
infection or network compromise.
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014