WESM zl Management and Configuration Guide WT.01.28 and greater

1-17
Introduction
ProCurve Wireless Edge Services zl Module
The module can also act at Layer 3 on traffic received on its uplink port, which can
be tagged for one or several VLANs.
Note Never tag the internal uplink and the downlink ports for the same VLAN.
In total, the Wireless Edge Services zl Module can support up to eight VLAN
interfaces with IP addresses and Layer 3 functionality. (The module can tag traffic
for these VLANs or for other VLANs that operate at Layer 2 only; in this guide, a
VLAN interface refers only to those VLANs that have been configured with IP
addresses.)
Note The Wireless Edge Services zl Module can support a total of 64 VLANs tagged to
its uplink interface and 64 tagged to its downlink interface. If the number is exceeded
the Module will not be able to communicate traffic for the additional VLANs. The
Module selects the first 64 VLANs tagged in ascending order.
Whether traffic arrives on a VLAN interface on the uplink port or is bridged to the
VLAN from a WLAN, the module can handle the traffic as follows:
■ respond to or relay DHCP requests
■ apply IP ACLs to packets
■ perform NAT on packets
■ filter packets using the internal firewall
■ route packets to their destinations
The following section helps you to consider when your environment requires your
Wireless Edge Services zl Module to provide these services. The sections that follow
provide more information about each particular capability.
Determining the Layer 3 Services Your Wireless Edge
Services zl Module Should Provide
When you are designing your network, you must consider which operations you want
the Wireless Edge Services zl Module to perform on wireless and wired traffic. The
answer often lies in the degree to which you want to separate wireless traffic from
your Ethernet network.
Using the Same VLANs for Wireless and Wired Users
If you want to handle wireless stations just as you do wired, you can configure the
Wireless Edge Services zl Module to assign WLAN traffic to the user VLANs already
in place in your wired network. On the wireless services-enabled switch, you tag the
module’s uplink port for those VLANs.