Access Ports
Access ports provide access to the network and can be configured as members of a
specific VLAN, thereby separating the traffic on these ports from traffic on other VLANs.
All Access Ports are set to Untag (native) VLAN 1 by default. This means that all Access
Ports belong to the native VLAN and are all part of a single broadcast domain. When
untagged frames from a client arrive at an AP’s Access Port, they are given an 802.1Q
VLAN header with 1 as their VLAN ID before being passed onto the wired network.
When VLAN 1 traffic arrives destined for the client, the VLAN tag is removed and it is
sent as plain (untagged) 802.11 traffic. When any tagged traffic other than VLAN 1 traffic
arrives at the same Access Port, it is dropped rather than forwarded to the client.
To remove ports from the native VLAN and assign them to specific VLANs, select Access
Port and enter any valid VLAN ID in the VLAN ID field (valid VLAN IDs are 2-4094).
The following table describes the behavior of incoming and outgoing traffic for Access
Ports with VLANs configured.
Table 27: Access Ports with VLANs configured
Outgoing Traffic (to the
client)
Incoming Traffic (from the
client)
VLAN Settings
All outgoing traffic on the
port is sent untagged.
All incoming traffic is native
VLAN (VLAN 1).
Access Port, Untag VLAN 1
Only traffic belonging to the
specified VLAN is
forwarded. All other VLAN
traffic is dropped.
All incoming traffic is sent to
the VLANs specified.
Access Port, Untag VLAN
[2-4094]
General Ports
General ports are user-defined ports that can have any combination of up to 20 VLAN
IDs assigned. General ports function similarly to Trunk ports, except that where Trunk
ports pass all VLAN traffic, General ports pass only the VLAN traffic that is defined by
the user.
To configure an AP Ethernet port as a General port, select General Port and enter multiple
valid VLAN IDs separated by commas or a range separated by a hyphen.
NOTE
You must also include the Untag VLAN ID in the Members field when defining
ID and want the port to pass traffic on VLANs 200 and 300, you would enter: 1,200,300.
Using Port Based 802.1X
802.1X authentication provides the ability to secure the network and optionally bind
service policies for an authenticated user. 802.1X provides logical port control and
205
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
Managing Access Points
Configuring AP Ethernet Ports
