Motorola WS5100 Series Reference Manual page 110

4-28 WS5100 Series Switch System Reference Guide
MCast Addr 1
MCast Addr 2
NAC Mode
9. Refer to the
messages if something goes wrong in the transaction between the applet and the switch.
10.Click on the
primary and secondary Radius and NAC server. For more information, see
Server Support on page
11.Select the Syslog
accounting details. To enable syslog, select the
menu. Use this sub screen to provide the Syslog Server IP address and port for the Syslog Server
performing the accounting function.
12.Select the NAC
Server Support on page
13.Click OK to use the changes to the running configuration and close the dialog.
14.Click Cancel
4.5.1.2 Assigning Multiple VLANs per WLAN
The switch allows the mapping of a WLAN to more than one VLAN. When a MU associates with a WLAN,
it is assigned a VLAN in such a way that users are load balanced across VLANs. The VLAN is assigned from
the pool representative of the WLAN. The switch tracks the number of MUs per VLAN, and assigns the least
used/loaded VLAN to the MU. This number is tracked on a per-WLAN basis.
To assign multiple VLANs to a WLAN:
1. Select Network
2. Select an existing WLAN from those displayed within the
A WLAN screen displays with the WLAN's existing configuration.
3. Select the VLAN
WLAN.
By default, all WLANs are initially assigned to VLAN 1.
The address provided takes packets (where the first 4 bytes match the first 4 bytes
of the mask) and sends them immediately over the air instead of waiting for the
DTIM period. Any multicast/broadcast that does not match this mask will go out
only on DTIM Intervals.
The second address also takes packets (where the first 4 bytes match the first 4
bytes of the mask) and sends them immediately over the air instead of waiting for
the DTIM period. Any multicast/broadcast that does not match this mask will go
out only on DTIM Intervals.
Using Network Access Control (NAC), the switch only grants access to specific
network resources. NAC restricts access to only compliant and validated devices
(printers, phones, PDAs etc.), thereby limiting the risk of emerging security risks.
NAC performs an authorization check for users and MUs without a NAC agent, and
verifies a MU's compliance with the network security policy. The switch supports
only the EAP/802.1x type of NAC. However, the switch can bypass NAC for MU's
without NAC 802.1x support. For the implications of using the include and exclude
with NAC, see Configuring the NAC Inclusion List on page 4-64
Configuring the NAC Exclusion List on page
Status field for the current state of the requests made from applet. This field displays error
Radius... button (when Radius is selected as the accounting mode) to configure an external
4-40.
button (when Syslog is selected as the accounting mode) to view switch syslog
button to configure the NAC mode. For more detailed information see
4-44.
to close the dialog without committing updates to the running configuration.
> Wireless LANs from the main menu tree.
radio button from the Configuration screen to change the VLAN designation for this
4-68.
Configuring External Radius
Syslog option from the Accounting Mode drop-down
Configuration tab and click the
and
Configuring NAC
Edit button.