Extreme Networks Altitude 3500 Series, Product Reference Manual

Page: 138 / 594

Network Management
Altitude 3500 Series Access Point Product Reference Guide
138
5 Configure the Advanced field as required to set MU interoperability permissions, secure beacon
transmissions, broadcast ESSID acceptance and Quality of Service (QoS) policies.
CAUTION
When using the access point’s hotspot functionality, ensure MUs are re-authenticated when changes are
made to the characteristics of a hotspot enabled WLAN, as MUs within the WLAN will be dropped from device
association.
6 Click Apply to save any changes to the WLAN screen. Navigating away from the screen without
clicking Apply results in all changes to the screens being lost.
7 Click Cancel to securely exit the New WLAN or Edit WLAN screen and return to the Wireless
Configuration screen.
Configuring WLAN Security Policies
As WLANs are being defined for an Altitude 35xx, a security policy can be created or an existing policy
edited (using the
Create or Edit buttons within the Security Configuration screen) to best serve the
security requirements of the WLAN. Once new policies are defined, they are available within the New
WLAN or Edit WLAN screens and can be mapped to any WLAN. A single security policy can be used
by more than one WLAN if its logical to do so. For example, there may be two or more WLANs within
close proximity of each other requiring the same data protection scheme.
Kerberos Password Enter a Kerberos password if Kerberos has been selected
as the security scheme from within the Security Policies
field. The field is grayed out if Kerberos has not been
selected for the WLAN.
Disallow MU to MU
Communication The MU-MU Disallow feature prohibits MUs from
communicating with each other even if they are on
different WLANs, assuming one of the WLAN’s is
configured to disallow MU-MU communication. Therefore,
if an MU’s WLAN is configured for MU-MU disallow, it will
not be able to communicate with any other MUs connected
to this access point.
Use Secure
Beacon Select the Use Secure Beacon checkbox to not transmit
the access point’s ESSID. If a hacker tries to find an
ESSID via an MU, the ESSID does not display since the
ESSID is not in the beacon. Extreme Networks
recommends keeping the option enabled to reduce the
likelihood of hacking into the WLAN.
Accept Broadcast
ESSID Select the Accept Broadcast ESSID checkbox to associate
an MU that has a blank ESSID (regardless of which
ESSID the access point is currently using). Sites with
heightened security requirements may want to leave the
checkbox unselected and configure each MU with an
ESSID. The default is unselected, thus not allowing the
acceptance of broadcast ESSIDs.
Quality of Service
Policy If QoS policies are undefined (none), select the Create
button to launch the New QoS Policy screen. Use this
screen to create a QoS policy, wherein data traffic for the
new or revised WLAN can be prioritized to best suit the
MU transmissions within that WLAN. For more information,
see
“Setting the WLAN Quality of Service (QoS) Policy” on
page 142 .