WESM zl Management and Configuration Guide WT.01.03 and greater

1-19
Introduction
ProCurve Wireless Edge Services zl Module
Reserving VLANs for Wireless Users
On the other hand, wireless networks are different from wired networks—
different in the services that they provide and different in the level of trust that
they inspire. You might use your wireless network to grant access to limited
services, such as only email and the Internet. You might open the wireless
network to guests and less trusted users.
If your wired network has adequate firewalls and other security measures, you
might prefer having the wired infrastructure handle the wireless traffic. In this
case, follow a similar design to that in“Using the Same VLANs for Wireless and
Wired Users” on page 1-18. However, create a VLAN just for wireless traffic:
■ Have the Wireless Edge Services zl Module map a WLAN to a VLAN
reserved for wireless users. (Or set up dynamic VLAN assignments for
wireless users.)
■ Configure that VLAN on wired infrastructure devices. The devices should
be able to route traffic in and out of the VLAN.
■ Tag the Wireless Edge Services zl Module’s uplink port for the VLAN.
Figure 1-8 shows a wireless network that separates VLANs used on the
wireless network from VLANs used on the wired network. In this network,
wired devices route traffic from the wireless network.
Figure 1-7. Reserving VLANs for Wireless Stations—Wired Device Routes