Management and Configuration Guide (Includes ACM xl) 2005-12

ProCurve Secure Access 700wl Series Management and Configuration Guide 6-17
Configuring the Network
network configuration changes after installation, you can modify the settings for your system
components through the 700wl Series system Administrative Interface.
In addition, there are advanced settings and other configuration options you may need to set up after
the initial installation. Once the system components have been installed, they must be configured to
communicate with the network and to properly pass client traffic over the uplink to the network.
Global and Local Networks
Network configuration is split into global and local network settings. Configuring the local and global
network settings is the first major task for those using the 700wl Series system to protect the enterprise
network.
A Local Network is the set of IP subnets and VLANs that are configured on the uplink of an individual
Access Controller. The Global Network is the Access Control Server 740wl’s view of the set of all subnets
configured on all Access Controllers in the system, organized into Subnet Groups. The domain names
and addresses of resources such as DHCP, DNS, and WINS servers, are also global settings, configured
per subnet group.
The Local Network page allows the association of VLAN IDs with IP subnets for individual Access
Controller uplinks. The Access Controller always includes an untagged subnet as the default subnet,
defined by the IP address and subnet mask of the device. The administrator can then add tagged
subnets by associating uplink subnets with VLAN IDs.
Subnets can be pre-defined through the Global Network page, or they can be defined on the Local
Network page for a specific Access Controller. If a subnet is predefined through the Global Network
page, it will appear in a list of subnets on the Local Network page, and can be selected and assigned to
a VLAN ID for that local network. When a subnet is defined for the first time on a Local Network page,
it is also added automatically to the list of global subnets, and will subsequently be available for
selection on other Local Network pages.
Every subnet is a member of a Subnet Group. A Subnet Group (also known as “SuperScope” in Microsoft
terminology) is defined by the set of IP address ranges available through the DHCP server associated
with that subnet group. An individual subnet is assigned membership in a subnet group based on
whether its IP address range falls within the range of the subnet group?? If a subnet is created that does
not match an existing subnet group, a new subnet group is created automatically. By default, there is
always at least one subnet group, that matches the default (untagged) subnet that exists on the Access
Controller.
Global Network Setup
The Global Network page provides a picture of the entire set of network subnets present on the uplink
ports of all the Access Controllers in the 700wl Series system. The Global Network page centralizes the
view of these subnets and the subnet groups of which they are members.
From the Global Network page, you can do the following:
• Create or edit Subnet Groups. A subnet group is a collection of one or more subnets that fall within
the IP address space of a specific DHCP server. All subnets are members of a subnet group.