NETGEAR ProSafe WC7520 Reference Manual page 74

ProSafe 20-AP Wireless Controller WC7520
Table 15. Basic security profile definition settings (continued)
Setting
Client Authentication section
Note: The options that display onscreen depend on the selection from Network Authentication drop-down
list.
Network Authentication
Data Encryption
Wireless Client Security
Separation
VLAN
Authentication Settings section
Note: The options that display onscreen depend on the selection from Network Authentication drop-down
list.
Open System, Shared
Key, WPA-PSK,
WPA2-PSK, and
WPA-PSK & WPA2-PSK
Managing Security Profiles and Profile Groups
Description
From the drop-down list, select the authentication type to be used: see
Table 16 on page 76.
From the drop-down list, select the data encryption type to be used. The
options available for data encryption as well as other requirements such as
entering a key or passphrase depend on the network authentication settings:
see Table 16 on page 76.
From the drop-down list, select Disable to prevent associated wireless clients
from communicating with each other or Enable to allow such communication.
Wireless client separation is intended for hotspots and other public access
situations.
Enter the VLAN ID to be associated with this security profile. This VLAN ID
needs to match the VLAN ID that is used by other network devices.
MAC ACL Select one of the following radio buttons:
• Local. Use local MAC authentication. The Local MAC ACL
Group drop-down list displays so you can select a group. For
more information, see
Authentication Groups
• External. Use external MAC authentication. The External
Radius Server drop-down list displays so you can select a
server. You can use either the basic-Auth RADIUS server or
a RADIUS server of an advanced authentication group. You
cannot use the external LDAP server. For information about
setting up and enabling internal and external authentication
servers, see
Authentication Server Groups
Note: The MAC ACL radio buttons do not display onscreen if
the network authentication uses an external RADIUS server.
The reason for this is that you can configure either MAC
authentication with an external RADIUS server or network
authentication with an external RADIUS server, but not both.
That is, if you configure an external RADIUS server with WPA,
WPA2, or WPA & WPA2 (or you use Legacy 802.1X) , you
cannot use external MAC authentication, and the MAC ACL
radio buttons do not display on screen. You still can use
internal MAC authentication.
74
Manage MAC Authentication and MAC
on page 110.
Manage Authentication Servers and
on page 115.