Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

1-5
Introduction
ProCurve Wireless Edge Services xl Module
Among other functions, the Wireless Edge Services xl Module:
■ manages a set of wireless LANs (WLANs)—each of which is identified
by a service set identifier (SSID) and defines various network and
security policies
■ receives traffic from wireless stations via RPs and places this traffic into
the correct VLAN to be forwarded into the wired network
■ adopts connecting RPs and automatically deploys configurations to them
Depending on how you configure the Wireless Edge Services xl Module, it
may also:
■ enforce users’ 802.1X, MAC, or Web authentication (Web-Auth) to either:
• an external Remote Authentication Dial-In User Service (RADIUS)
server
• its internal RADIUS server
■ apply quality-of-service (QoS) settings to traffic received from and des-
tined to wireless stations
■ provide DHCP services
■ route among up to eight VLANs
■ implement a firewall between VLANs, applying both MAC and IP access
control lists (ACLs) and Network Address Translation (NAT)
■ enable seamless and fast Layer 2 roaming, as well as Layer 3 roaming,
between one of its own RPs and an RP adopted by itself or by another
module
■ forward traffic received on a WLAN over a Generic Routing Encapsulation
(GRE) tunnel
■ monitor the wireless network for signs of an attack or intrusion
■ collect information about the wireless network and control self-healing
functions such as neighbor recovery and interference avoidance
■ sample wireless traffic and send the samples to an sFlow collector such
as ProCurve Manager Plus (PCM Plus)
This chapter provides a brief overview of these functions, as well as some of
the technologies on which they are based.