WESM zl Management and Configuration Guide WT.01.28 and greater

1-18
Introduction
ProCurve Wireless Edge Services zl Module
The module then forwards the traffic to the wireless services-enabled switch at Layer
2, and the same devices that route and control traffic from traditional users can handle
traffic from the wireless users. In this scenario, the module may perform few or none
of the Layer 3 functions listed in “Wireless Edge Services zl Module Operations” on
page 1-16.
Figure 1-6 shows how the Wireless Edge Services zl Module can forward traffic into
VLANs used on a wired network.
Figure 1-6. Forwarding WLAN Traffic into VLANs Used on the Wired Network
Reserving VLANs for Wireless Users
On the other hand, wireless networks are different from wired networks—different
in the services that they provide and different in the level of trust that they inspire.
You might use your wireless network to grant access to limited services, such as only
email and the Internet. You might open the wireless network to guests and less trusted
users.
If your wired network has adequate firewalls and other security measures, you might
prefer having the wired infrastructure handle the wireless traffic. In this case, follow
a similar design to that in“Using the Same VLANs for Wireless and Wired Users”
on page 1-17. However, create a VLAN just for wireless traffic:
■ Have the Wireless Edge Services zl Module map a WLAN to a VLAN reserved
for wireless users. (Or set up dynamic VLAN assignments for wireless users.)