Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module

431

432

433

434

435

436

437

438

439

440

Table Of Contents

ProCurve Wireless Edge Services xl Module and ProCurve Redundant Wireless Services xl Module
Title Page
Copyright and Disclaimer Notices
Table of Contents
1. Introduction
- Contents
- ProCurve Wireless Edge Services xl Module
- Radio Ports
- Redundancy Groups
- Layer 2 and Layer 3 Roaming Between RPs and Modules
2. Configuring the ProCurve Wireless Edge Services xl Module
- Contents
- Management Interfaces
- Radio Port Adoption
- System Maintenance
- SNMP Traps and Error Reporting
- Radio Port Licenses
- Setting System Information-Name, Time, and Country Code
- Enabling Secure Network Time Protocol (NTP)
- Digital Certificates
3. Radio Port Configuration
- Contents
- Overview
- Country-Code and Regulatory Procedures
- Configuring Radio Settings
  - Creating a Radio Adoption Default Configuration
  - Creating a Radio Configuration for a Particular Radio
- Considerations for Enabling Client Roaming
- Quality of Service (QoS) on RP Radios
  - WMM
  - SpectraLink Voice Priority (SVP)
4. Wireless Local Area Networks (WLANs)
- Contents
- Overview
- Configuration Options: Normal Versus Advanced Mode
  - Normal Mode Configuration
  - Advanced Mode Configuration
- Configuring a WLAN
- VLAN Assignment
  - WLAN-Based VLAN Assignment
    - Considerations for WLAN-Based VLAN Assignment
  - Identity-Based, or Dynamic, VLAN Assignment
- Traffic Management (QoS)
5. Web Authentication for Mobile Users
- Contents
- Overview
- Configuring Web-Auth
- Copying Logo Files to the Module’s Flash
- Configuring Custom Web-Auth Pages
  - Configuring the CGI Commands for the Login Page
  - Configuring the CGI Commands for the Welcome Page
6. IP Services-IP Settings, DHCP, and DNS
- Contents
- IP Settings
- IP Routing
- DNS Client
- DHCP Server
7. Access Control Lists (ACLs)
- Contents
- Overview
- Configuring ACLs
8. Configuring Network Address Translation (NAT)
- Contents
- Overview
- Planning the NAT Configuration
  - Consider Your Company’s Requirements for NAT
  - Record Necessary IP Addresses and Select the NAT Implementation Method
    - Planning the Configuration for Dynamic NAT
    - Planning the Configuration for Static NAT
- Configuring Standard ACLs for Dynamic NAT
- Configuring NAT
9. Fast Layer 2 Roaming and Layer 3 Mobility
- Contents
- Overview
- Configuring Fast Layer 2 Roaming for WPA/WPA2 with 802.1X
- Configuring Layer 3 Mobility
- Verifying and Managing Layer 3 Mobility
  - Monitoring Peers
  - Viewing a Station’s Status
10. Redundancy Groups
- Contents
- High Availability for Wireless Services
- Configuring a Redundancy Group
11. RADIUS Server
- Contents
- Overview
- RADIUS Authentication
  - Configuring the Internal RADIUS Server
  - Enabling Authentication to the Internal Server on a WLAN
- RADIUS Accounting
  - Enabling Accounting to the Internal RADIUS Server on a WLAN
  - Viewing the Internal RADIUS Server’s Accounting Logs
12. Configuring Tunnels with Generic Routing Encapsulation
- Contents
- Overview
- Configuring GRE Tunnels
- Viewing GRE Tunnels and WLAN Mappings
13. Wireless Network Management
- Contents
- Overview
- Monitoring the Wireless Network
- AP Detection
- Configuring Station Intrusion Detection
- Logging and Alarms
  - Configuring Logging
  - Managing the Alarm Log
- MAC Filters (Local MAC Authentication)
- Network Self Healing
  - Neighbor Recovery
  - Interference Avoidance
14. sFlow Agent
- Contents
- Overview
- Configuring sFlow Using the Web Browser Interface
Appendix A - ProCurve Wireless Services xl Module Command Line Reference
- Contents
- Overview
- Manager Commands
- Global Commands
- Interface Commands
- Wireless Commands
- Show Commands
- Show Commands (All Contexts)
- Show Commands (Wireless)
- Support Commands
- Support Commands (All Contexts)
- Support Commands (Wireless)
Index
Back Cover

4-88

Wireless Local Area Networks (WLANs)

VLAN Assignment

Identity-Based, or Dynamic, VLAN Assignment

The Wireless Edge Services xl Module can also divide traffic from wireless

users into VLANs based on those users’ identities. This capability (variously

called user-based VLANs or identity-based VLANs, as well as dynamic VLAN

assignment) allows you to:

■ configure one WLAN for your wireless network with a single SSID and

unified wireless security policy

■ simultaneously retain granular control over the network rights of each

wireless user

In order for your Wireless Edge Services xl Module to implement dynamic

VLAN assignment in a WLAN, stations must authenticate to a RADIUS server.

This server can be either the module’s internal server or an external network

server.

You must also manually enable dynamic VLAN assignment on the WLAN.

You should not use dynamic VLANs in certain circumstances:

■ You must place the WLAN in a Layer 3 mobility domain—Dynamic VLANs

disable Layer 3 mobility on the WLAN. See Chapter9: Fast Layer2

Roaming and Layer 3 Mobility for guidelines on when a network

requires Layer 3 mobility.

■ The WLAN requires Web-Auth—Dynamic VLANs can cause complications

because the Web-Auth station receives an IP address before it authenti-

cates. However, if you must, you can enabled dynamic VLAN assignment.

Take care to set the DHCP lease for the static VLAN very low.

On the Wireless Edge Services xl Module, to enable dynamic VLAN assignment

on a WLAN, complete these steps:

1. Access the Edit screen for the WLAN:

a. Select Network Setup > WLAN Setup and click the Configuration tab.

b. Select the WLAN and click the Edit button. The Edit screen is displayed.

2. Verify that the WLAN uses 802.1X EAP, Web-Auth, or MAC authentication.

3. Check the Dynamic Assignment box.

4. Click the OK button.

5. On the RADIUS server, configure users’ VLAN assignments.

a. See “Creating a Group” on page 11-12 in Chapter 11: RADIUS Server

to learn how to configure VLAN assignments on the Wireless Edge

Services xl Module’s internal RADIUS server.