WESM zl Management and Configuration Guide WT.01.03 and greater

1-8
Introduction
ProCurve Wireless Edge Services zl Module
Communicating with RPs: Radio Port VLANs
The Wireless Edge Services zl Module uses a Radio Port VLAN to send traffic
to and receive traffic from the RPs it adopts.
The RPs are designed to isolate traffic that they transmit into your network
until the Wireless Edge Services zl Module can control this traffic. An RP
encapsulates each wireless frame, leaving the 802.11 header and any encryp-
tion intact, and forwards it to the module on the Radio Port VLAN.
The Radio Port VLAN can be established in one of three ways:
■ with auto-provisioning on the wireless services-enabled switch
■ manually on an infrastructure switch (or, if you want, on the wireless
services-enabled switch)
■ dynamically on either a wireless services-enabled switch or an infrastruc-
ture switch based on a VLAN assignment stored on a RADIUS server
Note The rule that the Wireless Edge Services zl Module receives RP traffic on its
downlink port and a Radio Port VLAN has one exception. When an RP is
adopted at Layer 3, it can communicate with the module on either the uplink
or the downlink port. The only rule for the VLAN on which an RP is adopted
at Layer 3 is that this VLAN be tagged on only one of the internal ports.
For more information on Layer 3 adoption, see “Communications Between an
RP and the Wireless Edge Services zl Module: Layer 2 and Layer 3 Adoption”
on page 1-68.
Using Auto-Provisioning to Establish a Radio Port VLAN. When you
install a Wireless Edge Services zl Module in a zl switch, auto-provisioning is
enabled by default: the switch automatically establishes VLAN 2100 as the
default Radio Port VLAN, or the Auto-VLAN. (If VLAN 2100 is unavailable, the
switch uses the next available VLAN number.)
The switch also automatically configures the module’s internal downlink port
as a tagged member of this Radio Port VLAN. (The port is a tagged member
because the module drops all untagged traffic.)
When an RP is connected to a port on the wireless services-enabled switch,
the switch uses Link Layer Discovery Protocol (LLDP) to identify itself to the
switch. The switch then automatically configures the port as an untagged
member of the Radio Port VLAN. (Because the RP does not support 802.1Q,
the port must be an untagged member of the VLAN.)