Netgear WC9500 Manual de usuario descargar pdf (Pagina 117)

Manage Security Profiles and Profile Groups

117

ProSAFE Wireless Controller WC9500

For example, in an enterprise network in which all access points that are managed by the

wireless controller serve the same wireless networks and support the same settings, you can

use the basic configuration.

Large WLAN Networks

For large network deployments that consist of different sets of WLAN networks, consider

using the advanced configuration to create multiple profile groups. The access points that

belong to the same profile group use the same wireless, security, and QoS configurations.

The wireless controller supports up to eight profile groups. Each profile group can provide its

own wireless, security, and QoS configurations. Each profile group can contain up to

16 profiles for a dual-band access point, or 8 profiles for a single-band access point. Using

dual-band access points, the wireless controller could support a total of 128 profiles. Each

profile provides its own SSID and can provide its own VLAN to allow the profile to establish

its own tunnel. Profiles can also share the same VLAN.

Also, in larger network deployments, you would assign guests to a separate VLAN because

guests typically access only the Internet, not the business network, and are not allowed

peer-to-peer access.

Profile Naming Conventions

You can use profile naming conventions that are based on user groups such as Marketing, or

based on VLANs such as VLAN40, or you can use other naming conventions such as

CompanyName15.

Note: In the advanced configuration, you cannot change the names of

profile groups. However, you can change the group names of MAC

ACLs and external RADIUS servers.

Considerations Before You Configure Profiles

Before you create and configure profiles for the basic profile group or an advanced profile

group, consider the following:

• Authentication servers. If you want to use external LDAP or RADIUS authentication, or

both, first configure the authentication server settings:

- Configure basic server settings on the basic Authentication Server screen (see

Configure Basic

Authentication Server Settings on page 137).

- For more complex networks, configure additional RADIUS servers on the advanced

Authentication Server screen (see Configure a RADIUS Authentication Server Group

on page 140).

After you configure authentication server settings, you can then assign any authentication

server to a security profile in a basic profile group or advanced profile group.

1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 356 357

Sin comentarios

Netgear WC9500 Manual de usuario Pagina 117