AMX NXA-WAPZD1000, Operation/Reference Manual, Page: 60 / 154

Configure Tab
56 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
a guest WLAN. The only difference between a WLAN with wireless client isolation enabled and a
guest WLAN is that a guest WLAN requires users to enter a guest pass before they can access the
network. The same guest policy will be applied to a guest WLAN as to a WLAN with wireless
client isolation enabled.

Zero-IT Activation: Leave this check box selected (the default state), as it activates the NXA-
WAPZD1000's share in the automatic “new user” process, in which the new user's PC is easily and
quickly configured for WLAN use.

Dynamic PSK: Dynamic PSK is available when you have enabled Zero-IT Activation. When a
client is activated, the NXA-WAPZD1000 provisions the user with a pre-shared key. This per-user
key does not expire by default. If you want to set an expiration for Dynamic PSKs, you can do so
from the drop-down menu further down the page.

Priority: (Default: High). Set the priority of this WLAN to Low if you would prefer that other
WLAN traffic takes priority. For example, if you want to prioritize internal traffic over guest
WLAN traffic, you can set the priority in the guest WLAN configuration settings to Low. By
default all WLANs are set to high priority.
Advanced Options
The advanced options can be used to configure special WLANs; for example, you might want to create a
special WLAN for VoIP phone use only, or create a student WLAN that should be time-controlled to provide
access only during school hours.

Accounting Server: If you added a RADIUS Accounting server on the AAA servers page, select the
RADIUS Accounting server from the drop-down list, and then set the accounting update interval in
Send Interim-Update every x minutes. Note that this option is only available if:

Authentication Option is set to 802.1X EAP.

Authentication Option is set to Open or Shared, and Web Authentication is enabled.

Access Controls: Toggle this drop-down list to select the ACL to apply to this WLAN. An ACL
must be created before being available here.

Rate Limiting: Rate limiting controls fair access to the network. When enabled, the network traffic
throughput of each network device (i.e., client) is limited to the rate specified in the traffic policy,
and that policy can be applied on either the uplink or downlink.
Toggle the Uplink and/or Downlink drop-down lists to limit the rate at which WLAN clients
upload/download data.
The Disabled state means rate limiting is disabled; thus, traffic flows without prescribed limits.

VLAN: By default, all wireless clients associated with APs that the NXA-WAPZD1000 is managing
are segmented into a single VLAN (with VLAN ID 1). If you want to segment wireless clients into
different VLANs, select the Enable Dynamic VLAN check box to allow the NXA-WAPZD1000 to
assign VLAN IDs on a per-user basis. Before enabling dynamic VLAN, you need to define on the
RADIUS server the VLAN IDs that you want to assign to users.
If you want to change the default VLAN (VLAN ID 1) to which wireless clients are segmented,
select the Set Default VLAN Tag to check box, and then type the VLAN ID that you want to set as
default. The VLAN ID should be a number between 2 and 4094.

Hide SSID: Activate this option if you do not want the ID of this WLAN advertised at any time.
This will not affect the performance or force the WLAN user to perform any unnecessary tasks.

Tunnel Mode: Select this check box if you want to tunnel the WLAN traffic back to the
NXA-WAPZD1000. Tunnel mode enables wireless clients to roam across different APs on
different subnets. If the WLAN has clients that require uninterrupted wireless connection (for
example, VoIP devices and PDAs), enabling tunnel mode is recommended.
The SpeedFlex wireless performance tool will not work properly if wireless client
isolation is enabled on the WLAN. For example, SpeedFlex may be inaccessible to
users at http://{NXA-WAPZD1000-ip-address}/perf or SpeedFlex may prompt you to
install the SpeedFlex application on the target client, even when it is already installed.
For Zero-IT Activation to work on HP iPAQ, Internet Explorer Mobile 7.6 (or later)
must be installed. If your HP iPAQ users are using earlier versions of Internet
Explorer Mobile, upgrading to the latest version before connecting to your wireless
network is highly recommended.