WESM zl Management and Configuration Guide WT.01.XX and greater

1-12
Introduction
ProCurve Wireless Edge Services zl Module
Note You might also need to perform some configuration tasks on the wireless
services-enabled switch, such as raising the maximum number of VLANs. (See
the management and configuration guide for your zl switch.
Dynamically Establishing a Radio Port VLAN. If the RP authenticates
itself to a RADIUS server, this server may send a dynamic VLAN assignment
to the switch to which the RP connects. The switch configures the RP’s port
as an untagged member of the dynamic VLAN.
Both infrastructure and wireless services-enabled switches can receive set-
tings for dynamic Radio Port VLANs, depending, of course, on their capabili-
ties. The dynamic VLAN takes precedence over both manually configured and
auto-provisioned settings.
See “802.1X Client” on page 1-74 for more information on how ProCurve RPs
authenticate themselves.
Communicating with the Ethernet Network: Uplink VLANs
The Wireless Edge Services zl Module communicates with the Ethernet net-
work on the uplink VLANs.
Although the Wireless Edge Services zl Module receives traffic from RPs in a
Radio Port VLAN and this traffic has been transmitted over the Ethernet
network, the 802.11 frame is still intact. When the module receives this traffic,
it must bridge the traffic into the Ethernet network. As part of this process,
the module must place the traffic in a VLAN. The module does so according
to the VLAN assignment stored in the association with the wireless station
that sent the traffic.
This VLAN assignment is important because it determines the subnetwork in
which wireless stations are placed, as well as the type of network access they
receive. When the user authenticates and associates, the Wireless Edge Ser-
vices zl Module makes the VLAN assignment as follows:
■ The module assigns the station to a dynamic VLAN if two conditions are met:
• Dynamic VLANs are enabled on the station’s WLAN.
• A RADIUS server (either an external server or the module’s internal
server) sends a dynamic VLAN assignment for the successfully
authenticated user.
■ Otherwise, the module determines the WLAN to which the station belongs
and assigns it to the VLAN specified for that WLAN.