Concept Guide

l Specify the Allowed VLAN, enter a list of comma separated digits or ranges 1,2,5 or 1-4, or all. The
Allowed VLAN refers to the VLANs carried by the port in Access mode.
l If the Client IP Assignment is set to Network Assigned, specify a value for Native VLAN. A VLAN
that does not have a VLAN ID tag in the frames is referred to as Native VLAN. You can specify a value
within the range of 1-4093.
d. If the Access mode is selected:
l If the Client IP Assignment is set to Virtual Controller Assigned, proceed to step 2.
l If the Client IP Assignment is set to Network Assigned, specify a value for Access VLAN to
indicate the VLAN carried by the port in the Access mode.
2. Click Next. The Security tab details are displayed.
3. Configure security settings for the wired profile. For more information, see Configuring Security Settings for
a Wired Profile on page 121.
In the CLI
To configure VLAN settings for a wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# switchport-mode {trunk|access}
(Instant AP)(wired ap profile <name>)# allowed-vlan <vlan>
(Instant AP)(wired ap profile <name>)# native-vlan {<guest|1…4095>}
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
To configure a new VLAN assignment rule:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# set-vlan <attribute>{equals| not-equals| starts-with|
ends-with| contains| matches-regular-expression} <operator> <VLAN-ID>| value-of}
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
Configuring Security Settings for a Wired Profile
If you are creating a new wired profile, complete the Wired Settings and VLAN procedures before specifying
security settings. For more information, see Configuring Wired Settings on page 119 and Configuring VLAN
Settings for a WLAN SSID Profile on page 102.
Configuring Security Settings for a Wired Employee Network
You can configure security parameters for an employee network by using the Instant UI or CLI.
In the Instant UI
To configure security parameters for an employee network:
1. Configure the following parameters in the Security tab.
l MAC authentication—To enable MAC authentication, select Enabled. The MACauthentication is
disabled by default.
l 802.1X authentication—To enable 802.1X authentication, select Enabled.
l MAC authentication fail-thru—To enable authentication fail-thru, select Enabled. When this feature
is enabled, 802.1X authentication is attempted when MAC authentication fails. The MAC
authentication fail-thru checkbox is displayed only when both MAC authentication and 802.1X
authentication are Enabled.
l Select any of the following options for Authentication server 1:
Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide Wired Profiles | 121