D-Link DWL-2600AP Administrator's Manual page 49

Unified Access Point Administrator's Guide
Field
Radio
VAP
Enabled
VLAN ID
SSID
Broadcast SSID
Security
MAC Authentication
Type
January 2015
Description
Select the radio to configure. VAPs are configured independently on each radio.
You can configure up to 16 VAPs for each radio. VAP0 is the physical radio interface, so to
disable VAP0, you must disable the radio.
You can enable or disable a configured network.
•) To enable the specified network, select the Enabled option beside the appropriate
VAP.
•) To disable the specified network, clear the Enabled option beside the appropriate VAP.
If you disable the specified network, you will lose the VLAN ID you entered.
When a wireless client connects to the AP by using this VAP, the AP tags all traffic from the
wireless client with the VLAN ID you enter in this field unless you enter the untagged VLAN
ID or use a RADIUS server to assign a wireless client to a VLAN. The range for the VLAN ID
is 1 – 4094.
If you use RADIUS-based authentication for clients, you can optionally add the following
attributes to the appropriate file in the RADIUS or AAA server to configure a VLAN for the
client:
•) "Tunnel-Type"
•) "Tunnel-Medium-Type"
•) "Tunnel-Private-Group-ID"
The RADIUS-assigned VLAN ID overrides the VLAN ID you configure on the VAP page.
You configure the untagged and management VLAN IDs on the Ethernet Settings page. For
more information, see "Ethernet Settings" on page 35.
Enter a name for the wireless network. The SSID is an alphanumeric string of up to 32
characters. You can use the same SSID for multiple VAPs, or you can choose a unique
SSID for each VAP.
Note: If you are connected as a wireless client to the same AP that you are administering,
resetting the SSID will cause you to lose connectivity to the AP. You will need to reconnect to
the new SSID after you save this new setting.
Specify whether to allow the AP to broadcast the Service Set Identifier (SSID) in its beacon
frames. The Broadcast SSID parameter is enabled by default. When the VAP does not
broadcast its SSID, the network name is not displayed in the list of available networks on
a client station. Instead, the client must have the exact network name configured in the
supplicant before it is able to connect.
•) To enable the SSID broadcast, select the Broadcast SSID check box.
•) To prohibit the SSID broadcast, clear the Broadcast SSID check box.
Note: Disabling the broadcast SSID is sufficient to prevent clients from accidentally
connecting to your network, but it will not prevent even the simplest of attempts by a hacker
to connect or monitor unencrypted traffic. Suppressing the SSID broadcast offers a very
minimal level of protection on an otherwise exposed network (such as a guest network)
where the priority is making it easy for clients to get a connection and where no sensitive
information is available.
Select one of the following Security modes for this VAP:
•) None
•) Static WEP
•) WPA Personal
•) IEEE 802.1X
•) WPA Enterprise
If you select a security mode other than None, additional fields appear. These fields are
explained below.
Note: The Security mode you set here is specifically for this VAP.
You can configure a global list of MAC addresses that are allowed or denied access to
the network. The drop-down menu for this feature allows you to select the type of MAC
Authentication to use:
•) Disabled: Do not use MAC Authentication.
•) Local: Use the MAC Authentication list that you configure on the MAC Authentication
page.
•) RADIUS: Use the MAC Authentication list on the external RADIUS server.
For more information about MAC Authentication, see
Authentication" on page 58.
Table 22 - Virtual Access Point Settings
Section 4 - Managing the Access Point
"Controlling Access by MAC
Unified Access Point Administrator's Guide
Page 49