user manual

4-4
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-05
Chapter 4 Configuring VLANs
VLAN Security Policy
Single VLAN ID which allows Unencrypted packets
Identifies the number of the VLAN on which unencrypted packets can pass between the access point and
the switch. This setting is configurable.
Optionally allow Encrypted packets on the unencrypted VLAN
Determines whether the access point passes encrypted packets on an unencrypted VLAN. This setting
permits a client device to associate to the access point allowing both WEP and non-WEP associations.
VLAN ID
A unique number that identifies a VLAN. This number must match VLANs set on the switch. The setting
is configured by the user.
VLAN Name
A unique name for a VLAN configured on the access point. This setting is configured by the user. The
VLAN name is for information only and is not used by the switch or access point as a parameter for
determining the destination of data.
Existing VLANs
A list of successfully configured VLANs on the access point. As the user configures VLANs, they appear
in this list by ID number and name. From this list, you can edit or remove a VLAN.
VLAN Security Policy
You can define a security policy for each VLAN on the access point. This enables you to define the
appropriate restrictions for each VLAN you configure. The following parameters can be configured on
the radio’s Internal SSID page:
• SSID Name—a unique name for each wireless VLAN
• Maximum number of associations—ability to limit maximum number of wireless clients per SSID
• Default VLAN ID—VLAN ID mapping on the wired side
• Policy Group ID—The identification number of the applicable policy group.
• Accept Authentication types—Open, Shared, and Network-EAP
• Require EAP: —Under Open, Shared, and Network-EAP
• Default Unicast Address Filter—Allowed or Disallowed under Open, Shared, and Network-EAP
• MAC authentication—Under Open, Shared, and Network-EAP when the Default Unicast Address
Filter setting is Disallowed
The following parameters can be configured on the VLAN ID page:
• VLAN Name—The unique name for the VLAN
• VLAN Enable—Enables or disables this VLAN
• Default Priority—Ability to apply default CoS for each VLAN