HP E-MSM310, Management And Configuration Manual

Page: 106 / 210

Working with VSCs
VSC data flow
4-22
Features
 Authentication: Authentication can be either 802.1X or MAC. To validate user
credentials the AP makes use of an external RADIUS server, which can be the controller
or a third-party device. For more information, see Stand-alone deployment on page 4-2
 Wireless security filters: Enables the AP to block traffic unless it is addressed to a
specific device (like the controller). For more information, see Wireless security filters
on page 4-14 .
 MAC filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user MAC addresses. For more information, see MAC filter on page 4-19 .
 IP filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user IP addresses. For more information, see IP filter on page 4-20 .
Egress
 Bridge onto port 1+2: Unless a centralized mode tunnel has been established, user and
authentication traffic is bridged onto ports 1 and 2 (if available).
 VLAN: All traffic on port 1 or 2 (if available) can be assigned to a VLAN.
AP deployed with a controller
Ingress
The AP only handles wireless traffic. The SSID is the name of the wireless network that the
user associates with.
Features
 Authentication: Authentication can either 802.1X or MAC. To validate user credentials
the AP makes use of the controller. For more information, see the chapter on User
authentication in the MSM7xx Controllers Management and Configuration Guide .
 Wireless security filters: Enables the AP to block traffic unless it is addressed to a
specific device (like the controller). For more information, see Wireless security filters
on page 4-14 .
 MAC filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user MAC addresses. For more information, see MAC filter on page 4-19 .
 IP filter: Enables the AP to only allow wireless-to-wired LAN traffic for specific
wireless-user IP addresses. For more information, see IP filter on page 4-20 .
Egress
 Bridge onto port 1+2: User and authentication traffic is bridged onto ports 1 and 2 (if
available).
 VLAN: All traffic on port 1 or 2 (if available) can be assigned to a VLAN.