Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

1-17
Introduction
ProCurve Wireless Edge Services xl Module
Ethernet subnetwork (VLAN). When transmitting traffic back to wireless
stations, the module also acts at Layer 2, forwarding traffic based on the
associations to those stations.
After the module bridges a frame to a VLAN interface, the module can handle
the inner packet at Layer 3. Note that this VLAN interface may or may not be
tagged on the uplink port.
The module can also act at Layer 3 on traffic received on its uplink port, which
can be tagged for one or several VLANs.
In total, the Wireless Edge Services xl Module can support up to eight VLAN
interfaces with IP addresses and Layer 3 functionality. (The module can tag
traffic for these VLANs or for other VLANs that operate at Layer 2 only; in this
guide, a VLAN interface refers only to those VLANs that have been configured
with IP addresses.)
Whether traffic arrives on a VLAN interface on the uplink port or is bridged
to the VLAN from a WLAN, the module can handle the traffic as follows:
■ respond to or relay DHCP requests
■ apply IP ACLs to packets
■ perform NAT on packets
■ filter packets using the internal firewall
■ route packets to their destinations
The following section helps you to consider when your environment requires
your Wireless Edge Services xl Module to provide these services. The sections
that follow provide more information about each particular capability.
Determining the Layer 3 Services Your Wireless Edge
Services xl Module Should Provide
When you are designing your network, you must consider which operations
you want the Wireless Edge Services xl Module to perform on wireless and
wired traffic. The answer often lies in the degree to which you want to separate
wireless traffic from your Ethernet network.
Using the Same VLANs for Wireless and Wired Users
If you want to handle wireless stations just as you do wired, you can configure
the Wireless Edge Services xl Module to assign WLAN traffic to the user VLANs
already in place in your wired network. On the wireless services-enabled
switch, you tag the module’s uplink port for those VLANs.