Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

4-89
Wireless Local Area Networks (WLANs)
VLAN Assignment
b. One of the easiest ways to configure the assignment on an external
server itself is via an Identity Driven Manager (IDM) agent installed
on the server. In this case, you would configure the assignment
through ProCurve IDM and its Policy Manager. You would:
– Configure communities that include the wireless users.
– Create policies that match these communities to the appropriate
VLANs.
– Deploy the policies to the RADIUS server that the Wireless Edge
Services xl Module uses to authenticate wireless users.
In either case, when a user connects to a WLAN and authenticates to the
RADIUS server, the RADIUS server sends the VLAN assignment config-
ured for that user’s community to the Wireless Edge Services xl Module.
The module then tags all traffic from that user for that VLAN.
6. On the wireless services-enabled switch, you might need to tag the mod-
ule’s uplink port for the user-based VLANs just as you might if you had
configured the VLAN assignment manually.
Whether you tag to VLAN on the uplink port depends on whether you want
the Ethernet infrastructure to route the traffic or the module to do so. See
“Determining the Layer 3 Services Your Wireless Edge Services xl Module
Should Provide” on page 1-17 of Chapter 1: Introduction for more guid-
ance in this decision.
See the Wireless Edge Services xl Module Supplement to the 6400cl/
5300xl/3400cl Management and Configuration Guide for instructions
on tagging the uplink port.
Note Remember that the Wireless Edge Services xl Module can receive other
identity-based settings from an external RADIUS server, including:
■ access control lists (ACLs)
■ a rate limit on traffic from the wireless station
If you are using IDM, simply configure these settings in the IDM Policy
Manager at the same time that you configure the VLAN assignment. Refer to
the ProCurve Identity Driven Manager User’s Guide for more detailed
instructions on how to configure identity-based settings. (You can download
this guide from http://www.procurve.com.)