Specifications
OmniAccess Reference: AOS-W System Reference
454 Part 031652-00 May 2005
Direct traffic into the tunnel.
Traffic can be directed into the tunnel using static routes and/or ACLs:
z Using the tunnel as the next hop for a static route.
where the following parameters apply:
z Using an ACL to redirect traffic into a specified tunnel:
A session-based Access Control List (ACL) can be used to redirect selected traf-
fic into a tunnel. In the following example, an ACL rule named redirguest is used
to send traffic defined by the guest role into tunnel 1:
NOTE—This example assumes that the guest user-role has already been defined.
Wireless LAN Switch Setup for APs
The following sections cover the following:
z The different types of AP configuration profiles stored on the Wireless LAN
switch
z Commands and settings that can be configured
z Example configurations for common scenarios
Configuration Profiles
Many AP attributes are configured and stored in profiles on the Wireless LAN
switch. The profiles can be based on location index or BSSID.
(Alcatel) (config) # ip route
<dest. address>
<dest. netmask>
<tunnel IP address>
destination address The base IP address of the destination on the other
side of the tunnel.
destination netmask The subnet mask used with the destination address to create
an address range.
tunnel IP address An IP address on the tunnel network defined in the
previous step. This is used as the next hop for traffic
destined for the remote network.
(Alcatel) (config) # ip access-list session redirguest
(Alcatel) (config-sess-redirguest) # user any any redirect tunnel 1
(Alcatel) (config-sess-redirguest) # any user any permit
(Alcatel) (config-sess-redirguest) # user-role guest
(Alcatel) (config-role) # session-acl redirguest
(Alcatel) (config-role) # no session-acl control
(Alcatel) (config-role) # no session-acl cplogout
3