KPWL-0300 User's Manual
52
9.5 Multi SSID and VLAN
For the KYPWL-0300's access circuits, you can set an SSID at the maximum of 32 characters (16 × 2 bands), apply
different wireless LAN policies (authentication method, encryption method) for each SSID, and do VLAN mapping.
As a result, you can achieve flexible control over security and control over communications on the wireless network.
For example, by separating inner SSIDs and guest SSIDs, such as in the following diagrams, and doing VLAN mapping,
you can separate inner networks and guest networks, and ensure their security.
* Because there are only 2 LAN ports on a KPWL-0300, a VLAN-compliant L2 switch is required to configure networks
for which VLAN is used.
Setting Procedure
Assume that you are configuring the network in the diagram above. In this section, the inner VLAN ID is 101, and
the guest VLAN ID is 102. Additionally, the management VLAN ID to access the KPWL-0300 webpage is 103.
L2 Switch Settings
The L2 switch settings differ according to the type of device, so refer to the manual of the device you are using to
do settings. The required items are as noted below.
Port that connects to KPWL-0300: Trunk, Allow (101, 102, 103)
Port that connects to the inner network: Access, VLAN ID = 101
Port that connects to the guest network: Access, VLAN ID = 102
Port that connects to the PC to access the KPWL-0300 webpage: Access, VLAN ID = 103
Employee A
Access to inner SSID
Inner network
inner SSID
Authentication via WPA2/AES
Internet
guest SSID
No authentication, free Wi-Fi
Guest A
Access to guest SSID
L2-SW
