Working With Port-Based Vlans; Working With 802.1X On Wired Ethernet Ports - Ruckus Wireless ZoneFlex 7055 User Manual

Working with Port-Based VLANs

The AP provides options for segmenting all incoming traffic (both wireless and wired
Ethernet traffic) into specific VLANs. There are two ways to segment incoming traffic
into VLANs:
• Each of the wireless interfaces (SSIDs) can be configured with a specific Access
VLAN ID: (Configuration > Wireless > Wireless [#] > Access VLAN).
• Each of the LAN ports can be configured with an Untag VLAN ID (Configuration
> Ethernet Ports > VLAN > Untag ID).
For Ethernet ports, the behavior of the Untag VLAN ID depends on the Port Type
selected. If the port is configured as a Trunk port, it includes all VLANs (1-4094) in
its membership. The VLAN Untag ID field (default = 1) can be used to redefine the
"Native VLAN" for the port.
If the Ethernet port is configured as an Access Port, it can be configured with only
one Untag VLAN ID and its membership includes only that one VLAN.
If the Ethernet port is configured as a General Port, it can be configured to include
multiple VLANs in its membership and one Untag VLAN.

Working with 802.1X on Wired Ethernet Ports

802.1X authentication consists of the following three components:
• Supplicant: The supplicant sends access request messages along with creden-
tials, such as user name / password or digital certificate, to an authenticator,
which forwards the credentials to the authentication server for verification.
• Authenticator: The authenticator challenges the identity of the supplicant, then
passes its credentials to the AAA server. If the credentials are accepted the
supplicant is allowed access.
• Authentication Server (AAA Server): The AAA server verifies the supplicant's
credentials and permits or rejects its request for access.
For wired 802.1X, a Ruckus AP's Ethernet port can be configured as either an
Authenticator or as a Supplicant, depending on which port type is selected.
51 and Table 52
Ruckus Wireless Indoor AP 100.2.0 User Guide, 800-70892-001 Rev A
describe the 802.1X roles available by port type.
Configuring the AP
Configuring Ethernet Ports
Table
150