Ruckus Wireless ZoneDirector 3000, User Manual, Page: 243 / 430

Working with Access Point Groups
Modifying Model Specific Controls
ZoneDirector 9.8 User Guide, 800-70599-001 Rev B
243
General Ports
General ports are user-specified ports that can have any combination of up to 20
VLAN IDs assigned. Enter multiple valid VLAN IDs separated by commas or a range
separated by a hyphen.
Using Port-Based 802.1X
802.1X authentication provides the ability to secure the network and optionally bind
service policies for an authenticated user. 802.1X provides logical port control and
leverages the EAP authentication and RADIUS protocols to allow the network policy
to be effectively applied in real time, no matter where the user connects to the
network.
AP Ethernet ports can be individually configured to serve as either an 802.1X
supplicant (authenticating the AP to an upstream authenticator switch port), or as
an 802.1X authenticator (receiving 802.1X authentication requests from down-
stream supplicants). A single port cannot provide both supplicant and authenticator
functionality at the same time.
NOTE: If mesh mode is enabled on ZoneDirector, the 802.1X port settings will be
unavailable for any APs that support mesh. The ZoneFlex 7025 does not support
mesh, so 802.1X settings will remain available for those access points even when
mesh is enabled. However, the 802.1X settings are only available from the
Editing
[Access Point] dialogue, not from AP Groups. Therefore if you want to use 802.1X
on ZoneFlex 7025 ports (when mesh is enabled), you must configure each AP
individually.
AP Ethernet Port as Authenticator
The Access Point is similar in many ways to a wireless switch. On APs with two or
more wired ports, the AP acts as a network edge switch and can be configured to
authenticate downstream wired stations (which could include multiple clients
connected to another edge switch). When the AP Ethernet port is configured as an
802.1X authenticator, it can be further defined as either Port-based or MAC-based.
MAC-based authenticator mode is only supported if the port is an Access Port.
Table 25. Authenticator support vs. Port Type
Trunk Port Access Port General Port
Port-based mode X X X
MAC-based mode X