Default Setting
1
Command Mode
Global Configuration
Command Usage
• The management VLAN is for managing the access point. For example, the access point allows
traffic that is tagged with the specified VLAN to manage the access point via remote
management, SSH, SNMP, Telnet, etc.
vlan
This command enables VLANs for all traffic. Use the no form to disable VLANs.
Syntax
vlan enable
no vlan
Default
Disabled
Command Mode
Global Configuration
Command Usage
• Changing the VLAN status of the access point forces a system reboot.
• When VLANs are enabled, the access point tags frames received from wireless clients with the
default VLAN ID for the VAP interface. If IEEE 802.1x is being used to authenticate wireless
clients, specific VLAN IDs can be configured on the RADIUS server to be assigned to each
client. Using IEEE 802.1x and a central RADIUS server, up to 64 VLAN IDs can be mapped to
specific wireless clients.
• If the VLAN ID has not been configured for a client on the RADIUS server, then the frames are
tagged with the default VLAN ID of the VAP interface.
• When using IEEE 802.1x to dynamically assign VLAN IDs, the access point must have 802.1x
authentication enabled and a RADIUS server configured. Wireless clients must also support
802.1x client software.
• Traffic entering the Ethernet port must be tagged with a VLAN ID that matches the access
point's management VLAN ID, a VAP interface default VLAN ID, or with a VLAN tag that
matches one of the wireless clients currently associated with the access point.
Using the Web Management Interface
From the main menu, click VLAN. To configure the access point to support VLANs, set VLAN to
Enable and specify a management VLAN ID. Click Apply.
December 2006
© 2006 Foundry Networks, Inc.
VLAN Support
22-3
Need help?
Do you have a question about the IronPoint 200 and is the answer not in the manual?