Table of Contents
Advertisement
certain network and logically separated from the other users, independent
of the WLAN network they are currently using. Unlike the situation where
VLAN IDs are statically configured for a certain SSID ('VLAN ID'), in this case
a RADIUS server directly assigns the VLAN ID to the WLAN client.
Example:
The WLAN clients of two employees log into an Access Point in the WPA-
secured network with the SSID 'INTERNAL'. During registration, the
RADIUS requests from the WLAN clients are directed to the Access Point.
If the corresponding WLAN interface is in the operating mode 'managed'
the RADIUS requests are automatically forwarded to the WLAN Controller.
This forwards the request in turn to the defined RADIUS server. The
RADIUS server can check the access rights of the WLAN clients. It can also
use the MAC address or user names when using 802.1x to assign a certain
VLAN ID, for example for a certain department. The WLAN client in Mar-
keting, for example, receives the VLAN ID '10' and WLAN client from
Research & Development receives '20'. If no VLAN ID is specified for the
user, the SSID's primary VLAN ID is used.
The WLAN clients of the guests log into the same Access Point in the unse-
cured network with the SSID 'PUBLIC'. This SSID is statically bound to the
VLAN ID '99' and leads the guests into a certain network. Static and
dynamic VLAN assignment can be elegantly operated in parallel.
Assignment of the VLAN ID by the RADIUS server can be controlled by
other criteria, such as a combination of user name and password, for
example.
As an alternative to an external RADIUS server, WLAN clients can be
assigned with a VLAN ID via the internal FADIUS server or the stations
table in the LANCOM WLAN Controller ('Station table (ACL table)').
Chapter 4: Configuring the WLAN Controller
LANCOM WLC series
91
Advertisement
Table of Contents
