Specifications

Radio Interface
4-58 Advanced Configuration
• NativeVLANIDistheVLANIDforthisdefault radiointerface.Theaccesspointassignsthis
VLANIDtoallclienttrafficusingthisradiointerfaceunlessyouassignuniqueVLANIDsto
clientsthroughtheRADIUSserverusingRFC3580(Section3.31)tunnelattributes.
UsingRFC3580(Section3.31)
tunnelattributes,youmustconfigureuserVLANIDs(1‐4094)
ontheRADIUSserverforeachclientauthorizedtoaccessthenetwork.TheRADIUSserver
thenassignsaVLANIDtoaclientaftersuccessfulauthenticationusingIEEE802.1xanda
centralRADIUSserver.Ifaclientdoesnothave
aconfiguredVLANID,theaccesspoint
assignstheclienttothenativeVLANIDfortheradiointerface.Thedefaultis1.
WhensettingupVLANIDsforeachuserontheRADIUSserver,besuretousetheRADIUS
attributesandvaluesasindicatedinTable 4‐5.
• SecureAccess
specifieswhetherclientscanaccessthedefaultradiointerfacenetworkby
discoveringandautomaticallyconfiguringtheSSID,orwhetherclientsmustbealready
configuredwiththeSSID.Default:Disable
– Enabledeniesaccesstowirelessclientsthatdonothavethedefaultradiointerface
networkname(SSID)alreadyconfigured.Thisdefault
radiointerfacedoesnotbroadcast
itsnetworkname,sothatclientswithoperatingsystemslikeWindowsXPdonotseethe
nameshowupinwirelessLANconfigurationdialogs.
– Disablebroadcastsitsnetworkname,andclientscandiscoverandusetheSSIDtoaccess
thisdefaultradiointerface’swirelessnetwork.
• IBSSRelay:InconjunctionwithIBSSRelayControlsettings(seeFilterControlandVLANs on
page 4‐18),controlswhetherclientsassociatedwiththedefaultradiointerfacecanestablish
wirelesscommunicationswitheachotherthroughtheAP.Default:Disable
IfyouenableIBSSRelay,clientscanestablishwirelesscommunicationswitheachother

throughtheAP.IfyousettheIBSSRelayControltoAllVA P,thenclientsassociatedwithall
IBSSenabledradiointerfacesorVAPscanestablishwirelesscommunicationswitheachother.
IfyousettheIBSSRelayControltoPerVA P,onlytheclientsassociatedwiththesame(IBSS

enabled)radiointerfaceorVAPcancommunicatewitheachother.
• MaximumAssociations(0‐255)specifiesthenumberofclientsallowedtoassociatewiththis
radiointerface.
• FixedAntennaControlselectstheuseoftwodiversityantennasorasingleantenna.
Default:Diversity
– Diversity.Theradiousesbothantennas
inadiversitysystem.Selectthismethodwhenthe
AntennaIDissetto“DefaultAntenna”tousetheaccesspointʹsintegratedantennas.The
accesspointdoesnotsupportexternaldiversityantennas.
Table 4-5 VLAN ID RADIUS Attributes
Number RADIUS Attribute Value
64 Tunnel-Type VLAN (13)
65 Tunnel-Medium-Type 802
81 Tunnel-Private-Group-ID VLANID (1 to 4094 in hexadecimal)
Note: The specific configuration of RADIUS server software is beyond the scope of this guide.
Refer to the documentation provided with the RADIUS server software.