D-Link DWC-2000 User Manual - Page 100

Ignore Broadcast, MAC Authentication, Authentication Type, Redirect, Redirect URL, Wireless ARP,

Page 100 highlights

Section 4 - Advanced WLAN Configuration Field Ignore Broadcast VLAN MAC Authentication Authentication Type Redirect Redirect URL Wireless ARP Suppression Mode L2 Distributed Tunneling Mode Description If a wireless client broadcasts probe requests to all available SSIDs, this option controls whether the AP will respond to the probe request. ON = Prohibits the AP from responding to client probe requests. OFF = Allow the AP to respond to client probe requests. Enter a VLAN ID. Be sure this VLAN ID has been created (Network > VLAN > VLAN Setting) If enabled, wireless clients must be authenticated by the AP in order to connect to the network. To use MAC authentication, configure the client MAC addresses in one of the databases: Local or RADIUS. In the database, set a default action to either accept or deny that client or use the global action configured. MAC authentication is useful in networks that operate in Open mode to grant or deny access to clients with specific MAC addresses. MAC Authentication can also be used in conjunction with 802.1X security methods, in which the MAC Authentication is done prior to the 802.1X authentication. If Captive Portal Type = Permanent User and Authentication Server = RADIUS server, select the authentication type: PAP, CHAP, MSCHAP, or MSCHAPV2. Select the HTTP option in the Redirect field to redirect wireless clients to a custom Web page. When redirect mode is enabled, the user will be redirected to the URL you specify after the wireless client associates with an AP and the user opens a web browser to access the Internet. The custom Web page must be located on an external web server and might contain information such as the company logo and network usage policy. Note: The wireless client is redirected to the external Web server only once while it associated with the AP. Redirect functionality allows you to implement captive portal functionality; a captive portal is often used at Wi-Fi hotspots to provide branding for the hotspot provider and/ or display a legal disclaimer, which the user can click-through to access the Internet. HTTP=HTTP Redirect is enabled None=HTTP Redirect is disabled If Redirect = HTTP, enter the URL where all initial HTTP accesses should be redirected to. This field is accessible only when HTTP is selected as the redirect type. Enable the mode to allow APs to reduce the number of broadcasted ARP requests on the wireless interfaces. Reducing broadcasts helps conserve power on the wireless clients. The wireless clients that use power-save mode must wake up and use more power when they detect broadcast frames. Note: Enabling this feature slightly degrades AP packet forwarding performance due to extra packet filtering to find DHCP packets and extra processing for ARP request and reply packets. Networks that do not use IPv4 should not enable this feature. The distributed L2 tunneling mode supports L3 roaming for wireless clients without forwarding any data traffic to the Unified Wireless controller. Use the menu to enable or disable the mode. L2 tunneling is recommended when the Unified Wireless controller does not support hardware forwarding acceleration or hardware-based L2 tunnels. Note: 1 - When there is only one controller managing all APs and that controller goes down, all APs shut down their radios and the tunnel is terminated. After the controller recovers and the AP becomes managed again, the client that was previously tunneling traffic will re-associate and obtain an IP address on the network where its currently located. This IP address will be different from the IP address it was using when it was tunneling, and the traffic will not be tunneled. 2 - If the network has peer controllers and the tunnel is established between the APs managed by the peer controller then, when a controller managing the home AP fails, the controller managing the association AP detects the failure and terminates the tunnel. At this point the client is disassociated. When the client re-associates it obtains a new IP address. 3 - If the controller managing the association AP fails, then the scenario is the same as in item 1 above. The AP takes down all radios and the clients disassociate. D-Link DWC-2000 User Manual 100

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282

D-Link DWC-2000 User Manual
100
Section 4 - Advanced WLAN Configuration
Field
Description
Ignore Broadcast
If a wireless client broadcasts probe requests to all available SSIDs, this option controls
whether the AP will respond to the probe request.
ON = Prohibits the AP from responding to client probe requests.
OFF = Allow the AP to respond to client probe requests.
VLAN
Enter a VLAN ID. Be sure this VLAN ID has been created (Network > VLAN > VLAN Setting)
MAC Authentication
If enabled, wireless clients must be authenticated by the AP in order to connect to the
network. To use MAC authentication, configure the client MAC addresses in one of the
databases: Local or RADIUS. In the database, set a default action to either accept or deny
that client or use the global action configured.
MAC authentication is useful in networks that operate in Open mode to grant or deny
access to clients with specific MAC addresses. MAC Authentication can also be used in
conjunction with 802.1X security methods, in which the MAC Authentication is done
prior to the 802.1X authentication.
Authentication Type
If Captive Portal Type = Permanent User and Authentication Server = RADIUS server,
select the authentication type: PAP, CHAP, MSCHAP, or MSCHAPV2.
Redirect
Select the HTTP option in the
Redirect
field to redirect wireless clients to a custom Web
page. When redirect mode is enabled, the user will be redirected to the URL you specify
after the wireless client associates with an AP and the user opens a web browser to access
the Internet. The custom Web page must be located on an external web server and might
contain information such as the company logo and network usage policy.
Note:
The wireless client is redirected to the external Web server only once while it associated
with the AP.
Redirect functionality allows you to implement captive portal functionality; a captive
portal is often used at Wi-Fi hotspots to provide branding for the hotspot provider and/
or display a legal disclaimer, which the user can click-through to access the Internet.
HTTP=HTTP Redirect is enabled
None=HTTP Redirect is disabled
Redirect URL
If Redirect = HTTP, enter the URL where all initial HTTP accesses should be redirected to.
This field is accessible only when HTTP is selected as the redirect type.
Wireless ARP
Suppression Mode
Enable the mode to allow APs to reduce the number of broadcasted ARP requests on the
wireless interfaces. Reducing broadcasts helps conserve power on the wireless clients.
The wireless clients that use power-save mode must wake up and use more power when
they detect broadcast frames.
Note:
Enabling this feature slightly degrades AP packet forwarding performance due to extra
packet filtering to find DHCP packets and extra processing for ARP request and reply packets.
Networks that do not use IPv4 should not enable this feature.
L2 Distributed
Tunneling Mode
The distributed L2 tunneling mode supports L3 roaming for wireless clients without
forwarding any data traffic to the Unified Wireless controller. Use the menu to enable or
disable the mode.
L2 tunneling is recommended when the Unified Wireless controller does not support
hardware forwarding acceleration or hardware-based L2 tunnels.
Note:
1 - When there is only one controller managing all APs and that controller goes down, all APs shut
down their radios and the tunnel is terminated. After the controller recovers and the AP becomes
managed again, the client that was previously tunneling traffic will re-associate and obtain an
IP address on the network where its currently located. This IP address will be different from the IP
address it was using when it was tunneling, and the traffic will not be tunneled.
2 - If the network has peer controllers and the tunnel is established between the APs managed by the
peer controller then, when a controller managing the home AP fails, the controller managing the
association AP detects the failure and terminates the tunnel. At this point the client is disassociated.
When the client re-associates it obtains a new IP address.
3 - If the controller managing the association AP fails, then the scenario is the same as in item 1
above. The AP takes down all radios and the clients disassociate.