Fortinet FortiNac BFN320, Руководство по установке

Страница: 28 / 50

Table 13: Layer 2 Access Point Management Field Definitions
Field Definition
Access Point Management Interface eth1
Interface IP
Address
IP address for the VLAN interface on eth1. This VLAN is used when more than one
MAC address is detected on a single port. Typically occurs when network users
connect to a hub or an unmanaged router.
Mask Subnet mask.
Access Point Management: Production Network Scopes
Gateway
Gateway for eth1 when clients connect through this VLAN using the IP addresses
defined for the Production Network.
VLAN ID
Number used to identify this VLAN throughout the system. This number is used by
FortiNac. Network users in this VLAN are divided into authenticated users and
unauthenticated users. Authenticated users can access the production network using a
range of specified IP addresses. Unauthenticated users are isolated from the
production network based on a separate range of IP addresses. However, all users
remain in the same VLAN.
Lease Pool
Start
End
Starting and ending IP addresses that delineate the range of IP addresses available on
this VLAN.
Domain
Domain
Identifies the domain for this range of IP addresses. To help identify the VLAN,
incorporate part of the name in the domain. For example, for the isolation VLAN use
megatech-iso.com or for the registration VLAN use megatech-reg.com.
Note: Note: If you use agents for OS X, iOS, and some Linux systems,
using a .local suffix in Domain fields may cause communications issues.
Example:
Incorrect dns suffix for reg: tech-reg.megatech.local
Correct dns suffix for reg: tech.megatech-reg.edu
Lease Time
Time in seconds that an IP address in this domain is available for use. When this time
has elapsed the user is served a new IP address. The recommended lease time for
Access Point Management/Production is 3600 seconds.
Production DNS
Primary
IP address of the Primary DNS Server.
Production DNS
Secondary
IP address of the Secondary DNS Server.
Access Point Management: Isolation Network Scopes
Gateway
Gateway for eth1 when clients connect through this VLAN using the IP addresses
defined for the Isolation Network.
Layer 2 Network - Configure VLANS
25