Wireless > Virtual Access Point
354
SonicOS Enhanced 4.0 Administrator Guide
• “Virtual Access Points” section on page 363
• “Virtual Access Point Groups” section on page 364
VAP Configuration Overview
The following are required areas of configuration for VAP deployment. This sequence of steps
is designed specifically to honor dependencies, provide configuration task efficiency, and
minimize the total number of required steps for VAP configuration.
1. Zone - The Zone is the backbone of your VAP configuration. Each Zone you create will
have its own security and access control settings and you can create and apply multiple
zones to a single physical interface by way of wireless sub-interfaces.
2. Wireless Subnet - The Wireless subnet represents the IP address segment that will be
used for the VAP. Each VAP must have its own WLAN subnet, and the WLAN subnet must
be created before the VAP is created.
3. NSA DHCP Server - The DHCP server assigns leased IP addresses to users within
specified ranges, known as “Scopes”. It is important to note here that the default ranges for
DHCP scopes are often excessive for the needs of most NSA wireless appliance
deployments. For instance, a scope of 200 addresses for a sub-interface that only supports
30 users is rather excessive. Be aware of this during your setup and take care to ensure
the available DHCP lease scope for your NSA is not exhausted.
4. Virtual Access Points - The Virtual Access Points section allows for setup of general VAP
settings including SSID, wireless subnet association and authentication settings.
5. VAP Groups - The VAP Group feature allows for grouping of multiple Virtual Access Points
into one object to be provisioned to the wireless radio.
6. Assign WEP Key (optional for WEP encryption) - Up to 4 keys can be defined per-NSA
wireless appliance, and WEP-enabled VAPs can use these 4 keys independently. WEP
keys are configured on Wireless > Security page.
7. Assign Virtual Access Points to Wireless Radio - This feature allows you to choose
which VAP group to assign to the radio. Only a single VAP Group can be assigned to a
wireless radio, so ensure that all of the VAPs you wish to make available are assigned to
this group.
Network Zones
This section contains the following sub-sections:
• “The Wireless Zone” section on page 355
• “Custom Wireless Zone Settings” section on page 355