WESM zl Management and Configuration Guide WT.01.03 and greater

4-30
Wireless Local Area Networks (WLANs)
Configuring a WLAN
Setting Basic Configuration Options: SSID and VLAN
Interface
You must set the following options in the Configuration section of a WLAN’s
Edit screen:
■ the SSID
The SSID identifies the WLAN; stations associated to the same SSID are
in the same WLAN regardless of the RP radio to which they have associ-
ated. The SSID is sometimes called the network name; it is the name that
users see when they search for wireless networks to which to connect (as
long as the WLAN operates in open system).
Because SSIDs distinguish WLANs from each other, each WLAN must
have a unique SSID.
■ the VLAN interface associated with the WLAN
It is the Wireless Edge Services zl Module’s role to ready traffic received
from RPs for transmission into the Ethernet network. The module
removes the 802.11 header and adds an Ethernet header. This header
includes a 802.1Q tag for a particular VLAN. In other words, the module
assigns stations in the WLAN to a VLAN.
By default, the module places all wireless traffic in VLAN 1. If your
network only uses one subnetwork, this configuration is adequate. Many
networks, however, include multiple subnetworks, of which VLAN 1 is
sometimes the management VLAN. Because of security, as well as other,
concerns, you should often assign the WLAN a new VLAN ID.
You can tag wireless traffic for one of your network’s user VLANs, or you
can create a separate VLAN entirely dedicated to wireless stations. If you
choose the second option, of course, you must ensure traffic can reach
its destination. For example, configure the Wireless Edge Services zl
Module to route traffic. You might also need to configure Dynamic Host
Configuration Protocol (DHCP) and Network Address Translation (NAT)
services on the VLAN. See “Reserving VLANs for Wireless Users” on
page 1-19 of Chapter 1: “Introduction” for more explanation.
Your network might include a RADIUS server that assigns users to VLANs
based on their identities. Enable dynamic VLANs to allow the module to
enforce these assignments. (The VLAN ID that you configure manually
remains the default for users not assigned to a dynamic VLAN.)
You can also enter a description, but this setting is optional.