MSM7xx Controllers Configuration Guide v6.4.0

Binding to a VSC that has Wireless mobility and Subnet-based mobility enabled
User-assigned VLAN is assigned via RADIUS or local user accountUser-assigned VLAN
is not assigned via
RADIUS or local user
accounts
Egress network in VSC
binding
User-assigned VLAN does not exist in the
mobility domain
User-assigned VLAN
exists in the mobility
domain
VLAN nameVLAN ID
The user is
disconnected.
The Egress network
setting in the VSC
binding is ignored.
The IP address of the
user and the VLAN ID
are compared against
The IP address of the
user is compared
against the list of
Defined.
User is considered to
be at home and traffic
the list of home
subnets defined for the
AP to determine if the
home subnets defined
for the AP to
determine if the user is
at home or roaming.
is sent on the AP's
Ethernet port tagged
user is at home or
roaming. (Both the IP
If the user is at home,
traffic is sent on the AP
with the user-assigned
VLAN.
and VLAN must match
the home subnet.)
Ethernet port tagged
If the user is at home,
traffic is sent on the AP
with the VLAN
specified by the
Ethernet port taggedEgress network in the
VSC binding. with the user-assigned
VLAN.
If the user is roaming,
traffic is tunneled to The Egress network in
the VSC binding is
ignored.
the users home subnet
within the mobility
domain, where it
If the user is roaming,
traffic is tunneled to
egresses tagged with
the VLAN specified by
the users home
the Egress network in
the VSC binding.
network within the
mobility domain,
where it will egress
tagged with the
user-assigned VLAN.
User is considered to
be at home and traffic
The IP address of the
user and the VLAN ID
The IP address of the
user is compared to
Not defined.
is sent on the AP'sare compared againstthe IP address of the
Ethernet port taggedthe list of homeAPs Ethernet port to
with the user-assigned
VLAN.
subnets defined for the
AP to determine if the
determine if the user is
at home or roaming.
user is at home or
If the user is at home,
traffic is sent on the AP
roaming. (Both the IP
and VLAN must match
the home subnet.)
Ethernet port
untagged.
If the user is at home,
traffic is sent on the AP
If the user is roaming,
traffic is tunneled to
Ethernet port tagged
the users home
with the user-assigned
VLAN.
network within the
mobility domain,
If the user is roaming,
traffic is tunneled to
where it will egress
untagged.
the users home
network within the
mobility domain,
where it will egress
tagged with the
user-assigned VLAN.
Traffic flow for wireless users 225