ZyXEL Communications NWA3160 User Manual

Page of 314
 Chapter 3 Tutorial
ZyXEL NWA-3160 Series User’s Guide
65
3.4  Using Multiple MAC Filters and L-2 Isolation Profiles
This example shows you how to allow certain users to access only specific parts of your 
network. You can do this by using multiple MAC filters and layer-2 isolation profiles.
3.4.1  Scenario
In this example, you run a company network in which certain employees must wirelessly 
access secure file servers containing valuable proprietary data. 
You have two secure servers (1 and 2 in the following figure). Wireless user “Alice” (A) needs 
to access server 1 (but should not access server 2) and wireless user “Bob” (B) needs to access 
server 2 (but should not access server 1). Your ZyXEL Device is marked ZC is a workstation 
on your wired network, D is your main network switch, and E is the security gateway you use 
to connect to the Internet. 
Figure 36   Tutorial: Example Network
3.4.2  Your Requirements
You want to set up a wireless network to allow only Alice to access Server 1 and the 
Internet.
You want to set up a second wireless network to allow only Bob to access Server 2 and 
the Internet.
3.4.3  Setup
In this example, you have already set up the ZyXEL Device in MBSSID mode (see 
). It uses two SSID profiles simultaneously. You have configured each SSID 
profile as shown in the following table.
Table 6   Tutorial: SSID Profile Security Settings
SSID Profile Name
SERVER_1
SERVER_2
SSID
SSID_S1
SSID_S2