Cisco WAP371 Administration Manual page 75

Wireless
Networks
NOTE
STEP 5
Cisco Small Business WAP371 Wireless Access Point Administration Guide
- WPA Enterprise
If you select a security mode other than None, additional fields appear.
We recommend using WPA Personal or WPA Enterprise as the authentication
NOTE
type as it provides stronger security protection. Use Static WEP or Dynamic WEP only
for legacy wireless computers or devices that do not support WPA Personal/Enterprise.
If you need to set security as Static WEP or Dynamic WEP, configure Radio as 802.11a
or 802.11b/g mode (see Radio). The 802.11n mode restricts the use of Static or Dynamic
WEP as the security mode.
• MAC Filtering—Specifies whether the stations that can access this VAP are restricted
to a configured global list of MAC addresses. You can select one of these types of MAC
filtering:
- Disabled—Do not use MAC filtering.
- Local—Use the MAC Authentication list that you configure on the
page.
- RADIUS—Use the MAC Authentication list on an external RADIUS server.
• Channel Isolation—Enables and disables station isolation.
• When disabled, wireless clients can communicate with one another normally by sending
traffic through the WAP device.
- When enabled, the WAP device blocks communication between wireless clients on
the same VAP. The WAP device still allows data traffic between its wireless clients
and wired devices on the network, across a WDS link, and with other wireless
clients associated with a different VAP, but not among wireless clients.
Channel isolation is applicable to the clients connected to the same VAP of a single AP, but not
to the clients connected to the same VAP of different APs. So the clients connected to same VAP
of a single AP fail to ping each other and the clients connected to same VAP of different APs
can ping each other successfully.
• Band Steer—Enables band steer when both the radios are up. It effectively utilizes the
5-GHz band by steering dual-band supported clients from the 2.4-GHz band to the 5-
GHz band.
- It is configured on a per-VAP basis and needs to be enabled on both the radios.
- It is not encouraged on VAPs with time-sensitive voice or video traffic.
- It does not consider the n-bandwidth of the radio. Even if the 5-GHz radio happens
to use 20 MHz bandwidth, it tries to steer clients to that radio.
Click Save. The changes are saved to the Startup Configuration.
5
MAC Filtering
71