Manage Security Profiles and Profile Groups
122
ProSAFE Wireless Controller
Large WLAN Networks
For large network deployments that consist of different sets of WLAN networks, consider
using the advanced configuration to create multiple profile groups. The access points that
belong to the same profile group use the same WiFi, security, and QoS configurations.
The wireless controller supports up to eight profile groups. Each profile group can provide its
own WiFi, security, and QoS configurations. Each profile group can contain up to 16 profiles
for a dual-band access point, or 8 profiles for a single-band access point. Using dual-band
access points, the wireless controller could support a total of 128 profiles. Each profile
provides its own SSID and can provide its own VLAN to allow the profile to establish its own
tunnel. Profiles can also share the same VLAN.
Also, in larger network deployments, you would assign guests to a separate VLAN because
guests typically access only the Internet, not the business network, and are not allowed
peer-to-peer access.
Profile Naming Conventions
You can use profile naming conventions that are based on user groups such as Marketing, or
based on VLANs such as VLAN40, or you can use other naming conventions such as
CompanyName15.
Note: In the advanced configuration, you cannot change the names of
profile groups. However, you can change the group names of MAC
ACLs and external RADIUS servers.
Considerations Before You Configure Profiles
Before you create and configure profiles for the basic profile group or an advanced profile
group, consider the following:
• Authentication servers. If you want to use external LDAP or RADIUS authentication, or
both, first configure the authentication server settings:
- Configure basic server settings on the basic Authentication Server page (see
Configure Basic Authentication Server Settings on page 142).
- For more complex networks, configure additional RADIUS servers on the advanced
Authentication Server page (see Configure a RADIUS Authentication Server Group
on page 144).
After you configure authentication server settings, you can then assign any authentication
server to a security profile in a basic profile group or advanced profile group.
To Next Page
Loading...
Need help?
General
