Each WLAN has a traffic management setting that defines how traffic from wireless users reaches the wired network. The following options are available: Centralized, Centralized & Controlled, and Distributed.
Distributed
On a Distributed WLAN, APs forward wireless user traffic directly onto the wired network instead of sending it back to the controller. If needed, user traffic can be sent on a VLAN.
The APs forward all authentication traffic to the controller. User login credentials can be validated using either the local user accounts on the controller, or via an external authentication service (RADIUS server, Active Directory).
Centralized
On a Centralized WLAN, APs forward wireless user traffic to the controller. The wireless traffic is sent in a secure tunnel, which isolates it from other traffic on the wired network. The controller routes the traffic onto the wired network based on its target destination. In most scenarios, traffic exists the controller via the Internet port network (Internet network on the MSM720). Although, if you are using VLANs, traffic can also exit on the LAN port network (Access network on the MSM720).
The APs forward all authentication traffic to the controller. User login credentials can be validated using either the local user accounts on the controller, or via an external authentication service (RADIUS server, Active Directory).
Centralized & Controlled
A Centralized & Controlled WLAN provides the same path for wireless traffic and user authentication traffic as a Centralized WLAN: APs forward wireless user traffic to the controller. The wireless traffic is sent in a secure tunnel, which isolates it from other traffic on the wired network. The controller routes the traffic onto the wired network based on its target.
A Centralized & Controlled WLAN provides three additional features which are useful for managing user access to the network:
-
Centralized & Controlled user accounts: (Also called guest accounts) These user accounts let you define the following settings:
-
WLAN restriction: Restrict user access to specific WLANs.
-
Included minutes: Limit the amount of time a user can be connected to the WLAN.
-
Schedule: Specify the time of day during which a user can be connected to the WLAN.
-
Traffic quotas: Limit the amount of data uploaded/downloaded.
-
Bandwidth limits: Limit upload and download bandwidth.
-
Bandwidth control: Limit the upload and download speed.
-
-
Captive portal: The captive portal provides a web-based interface through which users can login, logout, and manage their connection to the wireless network. The portal is customizable. See Captive Portal.
-
Forward traffic to different networks: This feature lets you send user traffic to specific networks or VLANs. See Forward traffic to different networks.