3 setup – ZyXEL Communications ZyXEL ZyAIR NWA-3500 User Manual
Page 72
Chapter 4 Tutorial
ZyXEL NWA-3500 User’s Guide
72
4.4.3 Setup
In this example, you have already set up the ZyXEL Device in MBSSID mode (see
). It uses two SSID profiles simultaneously. You have configured each SSID
profile as shown in the following table.
Each SSID profile already uses a different pre-shared key.
In this example, you will configure access limitations for each SSID profile. To do this, you
will take the following steps.
1 Configure the SERVER_1 network’s SSID profile to use specific MAC filter and layer-2
isolation profiles.
2 Configure the SERVER_1 network’s MAC filter profile.
3 Configure the SERVER_1 network’s layer-2 isolation profile.
4 Repeat steps 1 ~ 3 for the SERVER_2 network.
5 Check your settings and test the configuration.
To configure layer-2 isolation, you need to know the MAC addresses of the devices on your
network, which are as follows.
To configure MAC filtering, you need to know the MAC addresses of the devices Alice and
Bob use to connect to the network, which are as follows.
Table 6 Tutorial: SSID Profile Security Settings
SSID Profile Name
SERVER_1
SERVER_2
SSID
SSID_S1
SSID_S2
Security
Security Profile
security03:
WPA2-PSK
Hide SSID
Security Profile
security04:
WPA2-PSK
Hide SSID
Intra-BSS traffic
blocking
Enabled
Enabled
Table 7 Tutorial: Example Network MAC Addresses
DEVICE
LABEL
MAC ADDRESS
ZyXEL Device
Z
BB:AA:99:88:77:66
Secure Server 1
1
AA:99:88:77:66:55
Secure Server 2
2
99:88:77:66:55:44
Workstation
C
88:77:66:55:44:33
Switch
D
77:66:55:44:33:22
Security gateway
E
66:55:44:33:22:11
Table 8 Tutorial: Example User MAC Addresses
USER
MAC ADDRESS
Alice
11:22:33:44:55:66
Bob
22:33:44:55:66:77