WESM zl Management and Configuration Guide WT.01.28 and greater

1-12
Introduction
ProCurve Wireless Edge Services zl Module
Note You might also need to perform some configuration tasks on the wireless services-
enabled switch, such as raising the maximum number of VLANs. (See the manage-
ment and configuration guide for your zl switch.
Dynamically Establishing a Radio Port VLAN. If the RP authenticates itself to a
RADIUS server, this server may send a dynamic VLAN assignment to the switch to
which the RP connects. The switch configures the RP’s port as an untagged member
of the dynamic VLAN.
Both infrastructure and wireless services-enabled switches can receive settings for
dynamic Radio Port VLANs, depending, of course, on their capabilities. The dynamic
VLAN takes precedence over both manually configured and auto-provisioned set-
tings.
See “802.1X Client” on page 1-70 for more information on how ProCurve RPs
authenticate themselves.
Communicating with the Ethernet Network: Uplink VLANs
The Wireless Edge Services zl Module communicates with the Ethernet network on
the uplink VLANs.
Although the Wireless Edge Services zl Module receives traffic from RPs in a Radio
Port VLAN and this traffic has been transmitted over the Ethernet network, the 802.11
frame is still intact. When the module receives this traffic, it must bridge the traffic
into the Ethernet network. As part of this process, the module must place the traffic
in a VLAN. The module does so according to the VLAN assignment stored in the
association with the wireless station that sent the traffic.
This VLAN assignment is important because it determines the subnetwork in which
wireless stations are placed, as well as the type of network access they receive. When
the user authenticates and associates, the Wireless Edge Services zl Module makes
the VLAN assignment as follows:
■ The module assigns the station to a dynamic VLAN if two conditions are met:
• Dynamic VLANs are enabled on the station’s WLAN.
• A RADIUS server (either an external server or the module’s internal server)
sends a dynamic VLAN assignment for the successfully authenticated user.
■ Otherwise, the module determines the WLAN to which the station belongs and
assigns it to the VLAN specified for that WLAN.