HP ProCurve Wireless Access Point 420 - Hewlett Packard

Access Point Configuration
Setting up Filter Control
Setting up Filter Control
The access point can employ VLAN ID and network traffic frame filtering to
control access to network resources and increase security.
Access and Frame Filtering. You can prevent communications between
wireless clients associated to the access point, only allowing traffic between
clients and the wired network. You can also prevent any wireless client from
performing any access point configuration through any of its management
interfaces, including web, Telnet, or SNMP access. Frame filtering can also be
enabled to control specific Ethernet protocol traffic that is forwarded to or
from wireless clients.
VLAN ID Filtering. The access point can enable the support of VLANtagged
traffic passing between wireless clients and the wired network. Up to
64 VLAN IDs can be mapped to specific wireless clients, allowing users to
remain within the same VLAN as they move around a campus site. This feature
can also be used to control access to network resources from wireless clients,
thereby improving security.
A VLAN ID (a number between 1 and 4095) can be assigned to each client after
successful authentication using IEEE 802.1x and a central RADIUS server.
The user VLAN IDs must be configured on the RADIUS server for each user
authorized to access the network. If a user does not have a configured VLAN
ID, the access point assigns the user to its own configured native VLAN ID.
When setting up VLAN IDs for each user on the RADIUS server, be sure to use
the RADIUS attributes and values as indicated in the following table.
Number RADIUS Attribute Value
64 Tunnel-Type VLAN (13)
65 Tunnel-Medium-Type 802
81 Tunnel-Private-Group-ID VLANID(1 to 4095 as hexadecimal)
Not e The specific configuration of RADIUS server software is beyond the scope of
this guide. Refer to the documentation provided with the RADIUS server
software.
5-32