Netgear WC7600 参照マニュアル

ページ / 307
Manage Security Profiles and Profile Groups 
84
ProSAFE Wireless Controller WC7600 
Large WLAN Networks
For large network deployments that consist of different sets of WLAN networks, consider 
using the advanced configuration to create multiple profile groups. The access points that 
belong to the same profile group use the same wireless, security, and QoS configurations.
The wireless controller supports up to eight profile groups. Each profile group can have its 
own wireless, security, and QoS configurations. Each profile group can contain up to 
16
 
profiles for a dual-band access point, or eight profiles for a single-band access point. 
Using dual-band access points, the wireless controller could support a total of 128 profiles. 
Each profile has its own SSID and can have its own VLAN to allow the profile to establish its 
own tunnel. Profiles can also share the same VLAN. 
In larger network deployments also, you would assign guests to a separate VLAN because 
guests typically access only the Internet, not the business network, and do not have 
peer-to-peer access.
Profile Naming Conventions
You can use profile naming conventions that are based on user groups such as Marketing, or 
based on VLANs such as VLAN40, or you can use other naming conventions such as 
CompanyName15.
Note:
In the advanced configuration, you cannot change the names of 
profile groups. However, you can change the group names of MAC 
ACLs and external RADIUS servers.
Considerations Before You Configure Profiles
Before you create and configure profiles for the basic profile group or an advanced profile 
group, consider the following:
Authentication servers. If you want to use external LDAP or RADIUS authentication, or 
both, first configure the authentication server settings:
-
Configure basic server settings on the basic Authentication Server screen (see 
105).
-
For more complex networks, configure additional RADIUS servers on the advanced 
107).
After you have configured authentication server settings, you can then assign any 
authentication server to a security profile in a basic profile group or advanced profile 
group.