40
F
ILTER
C
ONTROL
The Filter Control page allows you to control client communication within the
wireless network. You may enable one or more types of supported filtering;
however, some filter choices may supersede others. Configure the options as
described below. When you are finished, click
Apply.
F
ILTERING
BY
VLAN
The access point supports filtering of up to 64 VLANs (virtual local area networks).
VLAN IDs must be configured for each client on one of the RADIUS
authentication servers specified on the RADIUS configuration page. If a RADIUS
server is not being used or not setup to update the VLAN ID, then the access
point will tag all ethernet packets with the Native VLAN ID (defaulted to 1).
If a RADIUS authentication server will be used to create/modify the VLAN ID, the
following attributes must be provisioned on the RADIUS Server to be passed back
to the authenticating client:
The AP’s IP address is the RADIUS Client/Radius User
Tunnel_type (64) = VLAN (13)
Tunnel_Medium_type (65) = 802
Tunnel_Private_group_ID (81) = VLAN ID specified in Hexadecimal format.
VLAN Switch ports must be tagged ports that match the VLAN ID on the Access
Point. Associated client VLAN IDs will appear in the Syslog file in ASCII Decimal
format.
When VLAN filtering is enabled, the access point queries the server for the
VLAN IDs of associating clients and saves the VLAN IDs. If a client does not have a
VLAN ID, the access point assigns its own native VLAN ID to that client.
E
NABLING
VLAN F
ILTERING
To enable VLAN filtering, enter a VLAN ID (a number between 1 and 4095) in the
Management VLAN ID
field and select
VLAN Enable.
When VLAN filtering is disabled, the access point ignores VLAN-tagged frames.
