Netgear WC7600v1 - ProSAFE Wireless Controller User Manual

For large network deployments that consist of different sets of WLAN networks, consider 
using the advanced configuration to create multiple profile groups. The access points that 
belong to the same profile group use the same WiFi, security, and QoS configurations.

The wireless controller supports up to eight profile groups. Each profile group can provide its 
own WiFi, security, and QoS configurations. Each profile group can contain up to 16 profiles 
for a dual-band access point, or 8 profiles for a single-band access point. Using dual-band 
access points, the wireless controller could support a total of 128 profiles. Each profile 
provides its own SSID and can provide its own VLAN to allow the profile to establish its own 
tunnel. Profiles can also share the same VLAN. 

Also, in larger network deployments, you would assign guests to a separate VLAN because 

guests typically access only the Internet, not the business network, and are not allowed 
peer-to-peer access.

You can use profile naming conventions that are based on user groups such as Marketing, or 
based on VLANs such as VLAN40, or you can use other naming conventions such as 
CompanyName15.

In the advanced configuration, you cannot change the names of 
profile groups. However, you can change the group names of MAC 

ACLs and external RADIUS servers.

Before you create and configure profiles for the basic profile group or an advanced profile 
group, consider the following:

Authentication servers. If you want to use external LDAP or RADIUS authentication, or 

both, first configure the authentication server settings:

Configure basic server settings on the basic Authentication Server page (see 

For more complex networks, configure additional RADIUS servers on the advanced 

After you configure authentication server settings, you can then assign any authentication 

server to a security profile in a basic profile group or advanced profile group.