Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.01.03 or greater

1-22
Introduction
ProCurve Wireless Edge Services xl Module
Figure 1-7. Assigning VLANs Manually
See Chapter 3: Wireless Local Area Networks (WLANs) to learn how to
configure the VLAN assignment.
Filtering Traffic Manually. As discussed in “MAC Authentication” on page
1-19, the Wireless Edge Services xl Module can filter traffic according to the
source’s MAC address.
Note that, when it receives user-based settings, the Wireless Edge Services xl
Module automatically generates the correct ACLs for the user based on the
settings stored on the RADIUS server. When you filter traffic manually, you
must anticipate wireless traffic and create the correct, MAC address-based
ACLs ahead of time.
These manual ACLs act as authentication: rather than control which network
services a user can access, they either allow or block traffic from a station
entirely.
Table 1-4. User-Based Versus Manual ACLs
User-Based ACLs Manual ACLs (MAC-based Filters)
Applied dynamically when a particular user
connects
Applied to filter all inbound wireless traffic to
a WLAN
Operate at Layer 3 Operate at Layer 2
Control a particular user’s network access Authenticate a station based on its MAC
address