Ruckus Wireless ZoneDirector 1200, Руководство пользователя

Страница: 160 / 361

NOTE If Client Isolation and L3/L4/IP address ACLs are both in place and have
conflicting rules, the L3/L4/IP address ACL will take precedence, as the ACLs are
applied upon ingress, while the Client Isolation rules are applied after bridging.
• Isolate wireless client traffic from other clients on the same AP : Prevents
clients connected to the same AP from communicating with each other, but does
not prevent clients from communicating with other hosts connected to different
APs on the same subnet.
• Isolate wireless client traffic from all hosts on the same VLAN/subnet : Enable
this option to prevent clients from communicating with any other host on the
network, unless they are specifically allowed in a white list. A Client Isolation White
List must first be created on the
Configure > Access Control page before
appearing here (see Configuring Client Isolation White Lists on page 112).
• Zero-IT Activation : Enable this option to activate ZoneDirector's share in the
automatic "new user" process, in which the new user's wireless device is easily and
quickly configured for WLAN use. For more information, see
Enabling Automatic User
Activation with Zero-IT on page 219.
• Dynamic PSK : Dynamic PSK is available when you have enabled Zero-IT Activation.
When a client is activated, ZoneDirector provisions the user with a unique per-device
pre-shared key. For more information, see
Working with Dynamic Pre-Shared Keys
on page 222.
• Priority : Set the priority of this WLAN to Low if you would prefer that other WLAN
traffic takes priority. For example, if you want to prioritize internal traffic over guest
WLAN traffic, you can set the priority in the guest WLAN configuration settings to
Low. By default all WLANs are set to high priority.
Advanced Options
The advanced options can be used to configure special WLANs; for example, you might
want to create a special WLAN for VoIP phone use only, or create a student WLAN that
should be time-controlled to provide access only during school hours.
• Accounting Server : If you added a RADIUS Accounting server on the AAA servers
page, select the RADIUS Accounting server from the drop-down list, and then set
the accounting update interval in Send Interim-Update every x minutesUpdate values
are 0-1440. Setting the value to 0 disables periodic interim updates to the accounting
server, but client IP changes are still sent to the RADIUS Accounting server.
• Access Controls : Toggle this drop-down list to select Access Control Lists (L2 or
L3/L4), Device Policy and Precedence Policy to apply to this WLAN. An access control
entry must be created before being available here. For more information, see
Controlling Network Access Permissions on page 106.
• Enable Role based Access Control Policy : This feature allows different user groups
to have different access policies based on their user roles using the same WLAN.
See
Role Based Access Control Policy on page 231.
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide 160
Managing a Wireless Local Area Network
Creating a WLAN