User's Manual

178 Operation
Chapter 4 - Operation and Administration
SU may receive specific services from the RADIUS Authentication server based
on these credentials.
C Null (blank) User Password (non-null User Name)
Quick Mode is the recommended Service Mode. RADIUS Authorization and
Accounting servers (may be implemented in the same server) are required for
proper service provisioning.
A Base Station will reject an SU if its name (User Name) is identical to that of
another SU that is already served by the Base Station However, several SUs
connected to different Base Stations may be authenticated and provisioned with
services even if they use the same User Name and User Password. The maximum
number of duplicate SUs using the same User Name and User Password that may
be authenticated by the Authentication server (Duplicate Sessions) is configured
in the RADIUS Accounting server.
The service provisioning information sent by the RADIUS Authentication server to
the Base Station includes for each service (up to a maximum of 5 services) the
name of the Service Profile and VLAN parameters. In addition, the authentication
message includes also the Session Timeout and Termination Action. If the
Termination Action is Default, the Session (services to the SU) will be terminated.
If the Termination Action is RADIUS-request, the Base Station will try to
re-authenticate the user. If the service configuration in the Authentication server
has been changed, the services provisioned to the SU (if re-authenticated) will be
updated accordingly.
4.10.1.6 Using VLANs and VPLs
VLANs can be used for creating within the BreezeMAX network virtual groups of
multiple end-users (stations) belonging to the same organization (Subscriber).
They may also be used to differentiate between different end-users (stations)
connected to the same SU.
In the backbone, VPL ID (Virtual Private Link ID) is used. VPL is a virtual
connection between two points on the network, such as a base station and a
service provider or corporate network, identified by the VPL ID, with functionality
that is similar to VLAN ID (VLAN on the backbone network). Typically, it is used to
separate between different traffic types (e.g. Data and Voice), or traffic to/from
different ISPs or different corporate networks.
If the VPL ID is None (No VPL ID) and VLAN Transparency Mode is Off, frames
arriving from the infrastructure side with a VLAN ID tag will be discarded. Tagged
frames arriving from the wireless domain will be forwarded without a VLAN tag,
unless 802.1p Priority Marking is used. If 802.1p Priority Marking is used, tagged
frames will be forwarded with VPL ID = 0 and the defined Priority Marking Value.