Working with VSCs
VSC data flow
5-35
Wireless security filters: Enables the AP to block traffic unless it is addressed to a
specific destination (like the controller). See Wireless security filters on page 5-20.
Wireless MAC filter: Enables the AP to allow or deny access to the wireless network
based on specific wireless user MAC addresses.
Wireless IP filter: Enables the AP to only allow wireless-to-wired LAN traffic for
specific destination IP addresses.
Egress
Bridged onto port 1+2: Unless a centralized mode tunnel has been established, user
and authentication traffic is bridged onto ports 1 and 2.
VLAN: VLAN tags can be assigned for all traffic on a VSC. See Assigning egress VLANs to
a group on page 6-30.
VSC on controller
Ingress
SSID (from RADIUS auth request): The controller determines the SSID from the
RADIUS authentication request sent by the AP, and uses this SSID to determine the VSC
to use for authentication.
Features
Authentication: The controller supports 802.1X or MAC authentication. To validate user
login credentials the controller can use the local user accounts or make use of third-party
authentication servers (Active Directory and/or RADIUS). See Chapter 10: User
authentication, accounts, and addressing.