ZyXEL Communications G-3000H Manuel D’Utilisation

Page de 288
G-3000H User’s Guide
118
Chapter 9 VLAN
When you configure your wireless credentials, the ZyAIR sends the information to the 
IAS server using RADIUS protocol. 
Authentication by the RADIUS server is successful.
The RADIUS server sends three attributes related to this feature.
The ZyAIR compares these attributes with the VLAN screen mapping table.
If the Name, if for example VLAN 20 is found, the mapped VLAN 
ID is used. If it is  not found in the mapping table
the string in the Tunnel-Private-Group-ID attribute is considered as 
a number ID format, for example 2493. The range of the number ID 
(Name:string) is between 1 and 4094.
If a or b are not matched, the ZyAIR uses the VLAN ID configured in 
the SSID screen and the wireless station. This VLAN ID is 
independent and hence different to the ID in the VLAN screen.
9.2.2.1  Configuring VLAN Groups 
To configure a VLAN group you must first define the VLAN Groups on the Active Directory 
server and assign the user accounts to each VLAN Group. 
Using the Active Directory Users and Computers administrative tool, create the VLAN 
Groups that will be used for each VLAN ID. One VLAN Group must be created for each 
VLAN defined on the ZyAIR. The VLAN Groups must be created as Global/Security 
groups. 
• Type a name for the VLAN Group that describes the VLAN Group’s function. 
• Select the Global Group scope parameter check box. 
• Select the Security Group type parameter check box. 
• Click OK.
Figure 60   New Global Security Group 
In VLAN Group ID Properties, click the Members tab.