Specifications

Chapter 4: Networks
4-24
3. The Enable checkbox is marked by default to make the managed virtual interface
available to wireless clients. Clearing the checkbox makes the managed virtual
interface unavailable.
4. Complete the following options as appropriate for your network.
• Name - Enter a unique name for the managed virtual interface.
• VLAN ID - The VLAN identification number. The specified ID must be unique and
in the range of 2 to 4094. Enter 0 to indicate no VLAN.
• Automatically add Location Element for this VLAN -
• IP address - Enter the IP address of the managed virtual interface.
• Netmask - Enter the subnet mask for the managed virtual interface IP address.
• NAT the addresses to the protected interface address - Mark this checkbox to
map all client IP addresses on the managed remote subnet to the IP address of
the BSC protected interface. If this checkbox is cleared, NAT is disabled.
5. Optional. Using the IP Range Assignments table, define role assignments for devices/
users that have static IP addresses as they connect to the BSC on the managed virtual
interface. You can enter a range of IP addresses using the From and To fields.
6. Click Save to save the Managed Virtual Interface settings to the BSC database, or
Save and create another to continue creating managed virtual interfaces.
You might be prompted to restart the BSC. We recommend that you do not restart the
BSC until you have completely finished configuring the BSC for use in your network.
Configuring the Admin Interface
A new physical ethernet port on the BSC-2200/3200/5200 allows admin access to the
BSC without needing to be on the Managed or Protected network. The main purpose of
the Admin port is to provide out of band management for the BSC. In addition, the BSC
can be configured to send certain outbound protocols to the admin port. On the BSC-600
and BSC-1200, no physical interface is present, but you can use the Failover interface,
disabling the failover feature on the port.
The default IP address of the admin port is 10.1.1.1. To connect to the admin port,
configure a static IP of 10.1.1.2 on your laptop.
This Admin interface only supports the following inbound protocols: SNMP, HTTPS, PING,
and SSHD. Outbound traffic is possible from the Admin Interface for the following
protocols: SNMP Traps, Syslog, Radius, LDAP, other non-transparent authentication
servers. To configure outbound traffic, a Static Route must be added pointing to the
server. BVMS can also reside beyond to the admin interface, but it too must have a static
route pointing to it. See “Configuring Static Routes” on page 4-28.
Recommended tools:
• Web Browser for HTTPS access.
• SSH Client to test SSHD access.
• MIB browser, or BVMS, to test SNMP.
To configure the BSC to communicate with the ADMIN side of your network.
1. Click the Network tab in the BSC administrator console, and click the Admin tab.
The Edit Admin Interface (eth3) page appears as shown in Figure 4-16.
2. Mark the Enable checkbox to make the Admin interface available to administrators.
The Enable checkbox is marked by default on the BSC-2200/3200/5200. Clearing
the checkbox makes the Admin port unavailable. Enabling the admin port on the
BSC-600 and BSC-1200 disables the failover feature.