Ruckus Wireless ZoneFlex - Working with Port-Based Vlans; Working with 802.1 X on Wired Ethernet Ports

Configuring the Access Point
Configuring Ethernet Ports
ZoneFlex Indoor Access Point 9.8.1 User Guide, 800-70601-001 Rev C 151
Working with Port-Based VLANs
The Access Point provides options for segmenting all incoming traffic (both wireless
and wired Ethernet traffic) into specific VLANs. There are two ways to segment
incoming traffic into VLANs:
• Each of the wireless interfaces (SSIDs) can be configured with a specific Access
VLAN ID: (Configuration > Wireless > Wireless [#] > Access VLAN).
• Each of the LAN ports can be configured with an Untag VLAN ID (Configuration
> Ethernet Ports > VLAN > Untag ID).
For Ethernet ports, the behavior of the Untag VLAN ID depends on the Port Type
selected. If the port is configured as a Trunk port, it includes all VLANs (1-4094) in
its membership. The VLAN Untag ID field (default = 1) can be used to redefine the
“Native VLAN” for the port.
If the Ethernet port is configured as an Access Port, it can be configured with only
one Untag VLAN ID and its membership includes only that one VLAN.
If the Ethernet port is configured as a General Port, it can be configured to include
multiple VLANs in its membership and one Untag VLAN.
Working with 802.1X on Wired Ethernet Ports
802.1X authentication consists of the following three components:
• Supplicant: The supplicant sends access request messages along with creden-
tials, such as user name / password or digital certificate, to an authenticator,
which forwards the credentials to the authentication server for verification.
• Authenticator: The authenticator challenges the identity of the supplicant, then
passes its credentials to the AAA server. If the credentials are accepted the
supplicant is allowed access.
• Authentication Server (AAA Server): The AAA server verifies the supplicant’s
credentials and permits or rejects its request for access.
For wired 802.1X, a Ruckus AP’s Ethernet port can be configured as either an
Authenticator or as a Supplicant, depending on which port type is selected. Tabl e
53 and Tab l e 5 4 describe the 802.1X roles available by port type.
Table 53. Authenticator support by port type
Trunk Port Access Port General Port
Port-based mode X X X
MAC-based mode X