Netgear WC7500-Wireless User Manual - Page 121

WiFi Security Profile Concepts, Small WLAN Networks

Page 121 highlights

ProSAFE Wireless Controller WiFi Security Profile Concepts Profiles are sets of configurations that you can apply to an access point. The configuration includes radio parameters, load-balancing parameters, and rate-limit parameters. Each WiFi radio on an access point can support 8 profiles. For example, the dual-band WNDAP660 access point can support a total of 16 profiles. Therefore, in one profile group on the wireless controller, you can configure up to 8 profiles for each radio, that is, up to 8 profiles for the 2.4 GHz radio and up to 8 profiles for the 5 GHz radio. Setting up profiles allows you to configure the WLAN network offline. Then, when the WLAN network is operating, you can push the configuration onto managed access points. You can configure profiles and profile groups without taking the state of the access points into consideration. When the access points connect to the wireless controller, the profile configurations are pushed onto the access points. An access point can be a member of one profile group only. If you move an access point from one profile group to another, the access point stops serving the SSIDs in the old profile group and starts serving the SSIDs in the new profile group. Note: If an access point is removed from its building (someone takes it home or it is stolen), the access point does not retain the configuration that it received from the wireless controller. The configuration is not stored in memory on the access point. Depending on your network needs, you can either use the basic profile group (that is, the basic configuration) or the advanced profile groups (that is, the advanced configuration). The basic profile group works well for small-scale WLAN networks; advanced profile groups are useful for larger deployments. Note: For more information about basic and advanced profile groups, see Basic and Advanced Setting Concepts on page 33. Small WLAN Networks For small WLAN networks, you can use the basic configuration with the basic profile group. All access points belong to the same group and use the same WiFi, security, and QoS configurations. The basic profile group can contain up to 16 profiles for a dual-band access point, or 8 profiles for a single-band access point. Each profile provides its own SSID and can provide its own VLAN to allow the profile to establish its own tunnel. Profiles can also share the same VLAN. For example, in an enterprise network in which all access points that are managed by the wireless controller serve the same WiFi networks and support the same settings, you can use the basic configuration. Manage Security Profiles and Profile Groups 121

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398

Manage Security Profiles and Profile Groups
121
ProSAFE Wireless Controller
WiFi Security Profile Concepts
Profiles are sets of configurations that you can apply to an access point. The configuration
includes radio parameters, load-balancing parameters, and rate-limit parameters. Each WiFi
radio on an access point can support 8 profiles. For example, the dual-band WNDAP660
access point can support a total of 16 profiles. Therefore, in one profile group on the wireless
controller, you can configure up to 8 profiles for each radio, that is, up to 8 profiles for the 2.4
GHz radio
and
up to 8 profiles for the 5 GHz radio.
Setting up profiles allows you to configure the WLAN network offline. Then, when the WLAN
network is operating, you can push the configuration onto managed access points. You can
configure profiles and profile groups without taking the state of the access points into
consideration. When the access points connect to the wireless controller, the profile
configurations are pushed onto the access points.
An access point can be a member of one profile group only. If you move an access point from
one profile group to another, the access point stops serving the SSIDs in the old profile group
and starts serving the SSIDs in the new profile group.
Note:
If an access point is removed from its building (someone takes it
home or it is stolen), the access point does not retain the configuration
that it received from the wireless controller. The configuration is not
stored in memory on the access point.
Depending on your network needs, you can either use the basic profile group (that is, the
basic configuration) or the advanced profile groups (that is, the advanced configuration). The
basic profile group works well for small-scale WLAN networks; advanced profile groups are
useful for larger deployments.
Note:
For more information about basic and advanced profile groups, see
Basic and Advanced Setting Concepts
on page 33.
Small WLAN Networks
For small WLAN networks, you can use the basic configuration with the basic profile group.
All access points belong to the same group and use the same WiFi, security, and QoS
configurations.
The basic profile group can contain up to 16 profiles for a dual-band access point, or
8 profiles for a single-band access point. Each profile provides its own SSID and can provide
its own VLAN to allow the profile to establish its own tunnel. Profiles can also share the same
VLAN.
For example, in an enterprise network in which all access points that are managed by the
wireless controller serve the same WiFi networks and support the same settings, you can
use the basic configuration.