User`s guide

Chapter 4 Tutorial
NWA3550 User’s Guide
70
You have two secure servers (1 and 2 in the following figure). Wireless user “Alice” (A) needs
to access server 1 (but should not access server 2) and wireless user “Bob” (B) needs to access
server 2 (but should not access server 1). Your ZyXEL Device is marked Z. C is a workstation
on your wired network, D is your main network switch, and E is the security gateway you use
to connect to the Internet.
Figure 35 Tutorial: Example Network
4.4.2 Your Requirements
1 You want to set up a wireless network to allow only Alice to access Server 1 and the
Internet.
2 You want to set up a second wireless network to allow only Bob to access Server 2 and
the Internet.
4.4.3 Setup
In this example, you have already set up the ZyXEL Device in MBSSID mode (see Chapter 8
on page 113). It uses two SSID profiles simultaneously. You have configured each SSID
profile as shown in the following table.
Each SSID profile already uses a different pre-shared key.
In this example, you will configure access limitations for each SSID profile. To do this, you
will take the following steps.
1 Configure the SERVER_1 network’s SSID profile to use specific MAC filter and layer-
2 isolation profiles.
Internet
E
Z
1
2
C
B
A
D
Table 5 Tutorial: SSID Profile Security Settings
SSID Profile Name SERVER_1 SERVER_2
SSID SSID_S1 SSID_S2
Security Security Profile
security03:
WPA2-PSK
Hide SSID
Security Profile
security04:
WPA2-PSK
Hide SSID
Intra-BSS traffic
blocking
Enabled Enabled