Installation guide

Network Setup 4-31
9. Refer to the Status field for the current state of the requests made from applet. This field displays error
messages if something goes wrong in the transaction between the applet and the switch.
10.Click on the Radius... button (when Radius is selected as the accounting mode) to configure an external
primary and secondary Radius and NAC server. For more information, see Configuring External Radius
Server Support on page 4-49.
11.Select the Syslog button (when Syslog is selected as the accounting mode) to view switch syslog
accounting details. To enable syslog, select the Syslog option from the Accounting Mode drop-down
menu. Use this sub screen to provide the Syslog Server IP address and port for the Syslog Server
performing the accounting function.
12.If clustering and the Cluster GUI feature is enabled the Apply to Cluster feature will be available. Click
the Apply to Cluster button to apply the WLAN settings to all members in the cluster.
13.Click OK to use the changes to the running configuration and close the dialog.
14.Click Cancel to close the dialog without committing updates to the running configuration.
4.5.1.2 Assigning Multiple VLANs per WLAN
The switch allows the mapping of a WLAN to more than one VLAN. When a MU associates with a WLAN,
it is assigned a VLAN in such a way that users are load balanced across VLANs. The VLAN is assigned from
the pool representative of the WLAN. The switch tracks the number of MUs per VLAN, and assigns the least
used/loaded VLAN to the MU. This number is tracked on a per-WLAN basis.
To assign multiple VLANs to a WLAN:
1. Select Network > Wireless LANs from the main menu tree.
2. Select an existing WLAN from those displayed within the Configuration tab and click the Edit button.
A WLAN screen displays with the WLAN’s existing configuration.
3. Select the VLAN radio button from the Configuration screen to change the VLAN designation for this
WLAN.
By default, all WLANs are initially assigned to VLAN 1.
4. Select the Dynamic Assignment checkbox for an user based VLAN assignment with Radius for this
WLAN.
5. Select the Assign Multiple VLAN(s) button to map a WLAN to more than one VLAN. This displays the
Multiple VLAN Mapping screen.
MCast Addr 2 The second address also takes packets (where the first 4 bytes match the first 4
bytes of the mask) and sends them immediately over the air instead of waiting for
the DTIM period. Any multicast/broadcast that does not match this mask will go
out only on DTIM Intervals.
NAC Mode
Using Network Access Control (NAC), the switch only grants access to specific
network resources. NAC restricts access to only compliant and validated devices
(printers, phones, PDAs etc.), thereby limiting the risk of emerging security risks.
NAC performs an authorization check for users and MUs without a NAC agent, and
verifies a MU’s compliance with the network security policy. The switch supports
only the EAP/802.1x type of NAC. However, the switch can bypass NAC for MU’s
without NAC 802.1x support. For the implications of using the include and exclude
with NAC, see Configuring the NAC Inclusion List on page 4-71, Configuring the
NAC Exclusion List on page 4-75 and
Configuring NAC Server Support on page
4-53.