Black Box LWN602A User Manual page 100

Chapter 9: Common Configuration Examples
1. To create a VLAN object for employee traffic, click "Configuration > Advanced Configuration > Network Objects > VLANs >
New," and then enter the following in the VLANs dialog box:
VLAN Name: VLAN-10
Enter the following, and then click "Apply:"
VLAN ID: 10
Type: Global
Setting the type as "Global" means that SmartPath EMS applies the VLAN entry to all SmartPath APs that
include the VLAN object in their configuration—unless you add another VLAN entry to this VLAN object and
assign it a more specific classification type such as a classifier tag, map, or SmartPath AP. Then the SmartPath AP
applies the other VLAN entry if it has the same classifier tag, is on the specified map, or is the specified
SmartPath AP.
Description: VLAN for employees
2. To save the configuration and close the VLANs dialog box, click "Save."
3. To create a VLAN object for IT staff traffic, select the check box for the newly created VLAN object "VLAN-10" in the list on
the Configuration > Advanced Configuration > Network Objects > VLANs page, and then click Clone.
The VLANs dialog box appears with the settings for VLAN-10.
4. For VLAN Name, enter VLAN-20; in the VLAN ID field, change 10 to 20; modify the Description field to VLAN for IT staff; and
then click "Save."
You can see the two newly created VLAN objects on the Configuration > Advanced Configuration > Network Objects >
VLANs page.
5. To create a user profile for employees, click "Configuration > User Profiles > New," enter the following, leave the other settings
as they are, and then click "Save:"
Name: Emp(1)
Including the attribute number "(1)" as part of the user profile name is helpful when troubleshooting and when
configuring the RADIUS server. The name "Emp(1)" serves as reminder to use 1 as the Tunnel-Private-Group-ID attribute
when configuring the RADIUS server. SmartPath APs use a combination of three RADIUS attributes to determine which
user profile to assign to an authenticated user: Tunnel-Type = GRE (10), Tunnel-Medium-Type = IP (1), and Tunnel-Private-
Group-ID = <number>. If a SmartPath AP receives all three attributes and the third one matches a user profile attribute,
it then applies that user profile to traffic from the authenticated user. Including the attribute number in the user profile
name makes configuring the RADIUS server a bit simpler.
Attribute Number: 1
Default VLAN: VLAN-10
Description: For employees to use VLAN 10
6. To create a user profile for IT staff, select the check box of the user profile that you just created, "Emp(1)", and then click
Clone.
The User Profiles dialog box appears with the settings for Emp(1).
7. For Name, enter IT(2); for Attribute Number, enter 2; for Default VLAN, choose VLAN-20, modify the text in the Description
field to For IT staff to use VLAN 20, and then click Save.
Page 100
724-746-5500 | blackbox.com