Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

1-12
Introduction
ProCurve Wireless Edge Services xl Module
Note You might also need to perform some configuration tasks on the wireless
services-enabled switch, such as raising the maximum number of VLANs. (See
the ProCurve Series 6400cl Switches, 5300xl Switches, and 3400cl Switches
Management and Configuration Guide and ProCurve Series 6400cl
Switches, 5300xl Switches, and 3400cl Switches Advanced Traffic Manage-
ment Guide.)
Dynamically Establishing a Radio Port VLAN. If the RP authenticates
itself to a RADIUS server, this server may send a dynamic VLAN assignment
to the switch to which the RP connects. The switch configures the RP’s port
as an untagged member of the dynamic VLAN.
Both infrastructure and wireless services-enabled switches can receive set-
tings for dynamic Radio Port VLANs, depending, of course, on their capabili-
ties. The dynamic VLAN takes precedence over both manually configured and
auto-provisioned settings.
See “802.1X Client” on page 1-73 for more information on how ProCurve RPs
authenticate themselves.
Communicating with the Ethernet Network: Uplink VLANs
The Wireless Edge Services xl Module communicates with the Ethernet
network on the uplink VLANs.
Although the Wireless Edge Services xl Module receives traffic from RPs in a
Radio Port VLAN and this traffic has been transmitted over the Ethernet
network, the 802.11 frame is still intact. When the module receives this traffic,
it must bridge the traffic into the Ethernet network. As part of this process,
the module must place the traffic in a VLAN. The module does so according
to the VLAN assignment stored in the association with the wireless station
that sent the traffic.
This VLAN assignment is important because it determines the subnetwork in
which wireless stations are placed, as well as the type of network access they
receive. When the user authenticates and associates, the Wireless Edge Ser-
vices xl Module makes the VLAN assignment as follows:
■ The module assigns the station to a dynamic VLAN if two conditions are met:
• Dynamic VLANs are enabled on the station’s WLAN.
• A RADIUS server (either an external server or the module’s internal
server) sends a dynamic VLAN assignment for the successfully
authenticated user.