Alvarion BreezeACCESS Wi2, System Manual

Page: 109 / 252

Virtual Network Data Flow
BreezeMAX Wi² and BreezeACCESS Wi² System Manual 87
5.4.1 Stand-alone Deployment
5.4.1.1 Virtual Network on Autonomous AP
5.4.1.1.1 Ingress
The AP only handles wireless traffic. The SSID is the name of the wireless network that the user
associates with.
5.4.1.1.2 Features
„
Authentication: Authentication can be either 802.1X or MAC. To validate user credentials the
AP makes use of an external RADIUS server, which can be the service controller or a
third-party device. For more information, see “Authenticating Administrators Using a RADIUS
Server” on page 135 .
„
Wireless security filters: Enables the AP to block traffic unless it is addressed to a specific
device (like the service controller). For more information, see “Wireless Security Filters” on
page 81 .
„
Wireless MAC filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user MAC addresses.
„
Wireless IP filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user IP addresses.
5.4.1.1.3 Egress
„
Bridge onto port 1+2: Unless a centralized mode tunnel has been established, user and
authentication traffic is bridged onto ports 1 and 2.
„
VLAN: All traffic on port 1 or 2 can be assigned to a VLAN.
5.4.2 AP deployed with an Alvarion Service Controller
5.4.2.1 Ingress
The AP only handles wireless traffic. The SSID is the name of the wireless network that the user
associates with.
5.4.2.2 Features
„
Authentication: Authentication can either 802.1X or MAC. To validate user credentials the AP
makes use of the service controller. For more information, see “Authenticating Administrators
Using a RADIUS Server” on page 135 .