Specifications

Introduction
Altitude 35x0 Access Point Product Reference Guide18
The access point has a second LAN subnet enabling administrators to segment the access point’s LAN
connection into two separate networks. Both LANs can still be active at any given time, but only one
can transmit over the access point’s physical LAN connection.
On-board Radius Server Authentication
The access point has the ability to work as a Radius Server to provide user database information and
user authentication. Each user is authorized based on the access policies applicable to that user. Access
policies allow an administrator to control access to a user groups based on the WLAN configurations.
Hotspot Support
The access point allows hotspot operators to provide user authentication and accounting without a
special client application. Rather than rely on built-in 802.11 security features to control access point
association privileges, you can configure a WLAN with no WEP (an open network). The access point
issues an IP address to the user using a DHCP server, authenticates the user and grants the user to
access the Internet.
If a tourist visits a public hotspot and wants to browse a Web page, they boot their laptop and associate
with a local Wi-Fi network by entering a valid SSID. They start a browser, and the hotspot’s access
controller forces the un-authenticated user to a Welcome page (from the hotspot operator) that allows
the user to login with a username and password. In order to send a redirected page (a login page), a
TCP termination exists locally on the access point. Once the login page displays, the user enters their
credentials. The access point connects to the Radius server and determines the identity of the connected
wireless user. Thus, allowing the user to access the Internet once successfully authenticated.
Dynamic DNS
The access point supports the Dynamic DNS service. Dynamic DNS (or DynDNS) is a feature offered by
www.dyndns.com which allows the mapping of domain names to dynamically assigned IP addresses.
When the dynamically assigned IP address of a client changes, the new IP address is sent to the
DynDNS service and traffic for the specified domain(s) is routed to the new IP address.
Auto Negotiation
Auto negotiation enables the access point to automatically exchange information (over either its LAN or
WAN port) about data transmission speed and duplex capabilities. Auto negotiation is helpful when
using the access point in an environment where different devices are connected and disconnected on a
regular basis.
IP Filtering
IP filtering determines which IP packets are processed normally and which are discarded. If discarded,
the packet is deleted and completely ignored (as if never received). Optionally apply different criteria to
better refine which packets to filter.
IP filtering supports the creation of up to 18 filter rules enforced at layer 3. Once defined (using the
access point’s SNMP, GUI or CLI), filtering rules can be enforced on the access point’s LAN1, LAN2 and