Cisco AP541N-A-K9 Administration Guide - Page 59

Add Another, separate RADIUS server settings for each VAP.

Page 59 highlights

Wireless Modifying Virtual Access Point Settings 4 NOTE Note that only those VAPs which have non-default configuration are displayed when the page initially loads. To configure additional VAPs, click Add Another to expose new (empty) VAP entries. For each VAP, you can customize the security mode to control wireless client access. Each VAP can also have a unique SSID. Multiple SSIDs make a single access point look like two or more access points to other systems on the network. By configuring VAPs, you can maintain better control over broadcast and multicast traffic that affects network performance. You can configure each VAP to use a different VLAN, or you can configure multiple VAPs to use the same VLAN. VAP0, which is always enabled, is assigned to VLAN 1 by default. VAP1 is also enabled by default and assigned to VLAN 100. The access point adds VLAN ID tags to wireless client traffic based on the VLAN ID you configure on the VAP page or by using the RADIUS server assignment. If you use an external RADIUS server, you can configure multiple VLANs on each VAP. The external RADIUS server assigns wireless clients to the VLAN when the clients associate and authenticate. You can configure up to four global IPv4 RADIUS servers. One of the servers always acts as a primary while the others act as backup servers. The network type and accounting mode are common across all configured RADIUS servers. You can configure each VAP to use the global RADIUS server settings, which is the default, or you can configure a per-VAP RADIUS server set. You can also configure separate RADIUS server settings for each VAP. The Global RADIUS server settings are collapsed when the page initially loads. To show (expand) the Global RADIUS server settings section of the page, click the right arrow icon to the left of the Global RADIUS server settings section title. To collapse the Global RADIUS server settings section, click the down arrow icon to the left of the Global RADIUS server settings section title. If wireless clients use a security mode that does not communicate with the RADIUS server, or if the RADIUS server does not provide the VLAN information, you can assign a VLAN ID to each VAP. The access point assigns the VLAN to all wireless clients that connect to the access point through that VAP. NOTE Before you configure VLANs on the access point, be sure to verify that the switch and DHCP server the access point uses can support IEEE 802.1Q VLAN encapsulation. Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide 56

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176

Wireless
Modifying Virtual Access Point Settings
Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide
56
4
NOTE
Note that only those VAPs which have non-default configuration are displayed
when the page initially loads. To configure additional VAPs, click
Add Another
to
expose new (empty) VAP entries.
For each VAP, you can customize the security mode to control wireless client
access. Each VAP can also have a unique SSID. Multiple SSIDs make a single
access point look like two or more access point
s
to other systems on the network.
By configuring VAPs, you can maintain better control over broadcast and multicast
traffic that affects network performance.
You can configure each VAP to use a different VLAN, or you can configure multiple
VAPs to use the same VLAN. VAP0, which is always enabled, is assigned to
VLAN 1 by default. VAP1 is also enabled by default and assigned to VLAN 100.
The access point adds VLAN ID tags to wireless client traffic based on the VLAN
ID you configure on the VAP page or by using the RADIUS server assignment. If
you use an external RADIUS server, you can configure multiple VLANs on each
VAP. The external RADIUS server assigns wireless clients to the VLAN when the
clients associate and authenticate.
You can configure up to four global IPv4 RADIUS servers. One of the servers
always acts as a primary while the others act as backup servers. The network
type and accounting mode are common across all configured RADIUS servers.
You can configure each VAP to use the global RADIUS server settings, which is the
default, or you can configure a per-VAP RADIUS server set. You can also configure
separate RADIUS server settings for each VAP.
The Global RADIUS server settings are collapsed when the page initially loads. To
show (expand) the Global RADIUS server settings section of the page, click the
right arrow icon to the left of the Global RADIUS server settings section title. To
collapse the Global RADIUS server settings section, click the down arrow icon to
the left of the Global RADIUS server settings section title.
If wireless clients use a security mode that does not communicate with the
RADIUS server, or if the RADIUS server does not provide the VLAN information,
you can assign a VLAN ID to each VAP. The access point assigns the VLAN to all
wireless clients that connect to the access point through that VAP.
NOTE
Before you configure VLANs on the access point, be sure to verify that the switch
and DHCP server the access point uses can support IEEE 802.1Q VLAN
encapsulation.