Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.01.03 or greater

3-63
Wireless Local Area Networks (WLANs)
VLAN Assignment
You do not configure identity-based VLAN assignment on the module itself. If
the Wireless Edge Services xl Module uses identity-based assignment, it
dynamically assigns traffic to the correct VLAN based on settings received
from an authentication server.
Note that the Wireless Edge Services xl Module can use both kinds of assign-
ment on the same WLAN, but identity-based settings always take precedence.
For example, you manually assign WLAN 1 to VLAN 10. Users A, B, and C
connect to WLAN 1; however, the RADIUS database only includes a VLAN
assignment for users A and B. When user C connects to the WLAN, the Wireless
Edge Services xl Module forwards its traffic in VLAN 10. When user A connects
to the WLAN, the authentication server sends the module a VLAN assignment
of VLAN 20 for this user; the module forwards user A’s traffic in VLAN 20. (See
Figure 3-38.)
Figure 3-38. WLAN Versus Identity-Based VLAN Assignment
WLAN-Based VLAN Assignment
You configure WLAN-based VLAN assignment by manually assigning the
WLAN to a VLAN.
You can complete this step at the same time that you configure the SSID and
security settings, as described in “VLAN” on page 3-33 and as shown in
Figure 3-39.