Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.01.03 or greater

3-69
Wireless Local Area Networks (WLANs)
VLAN Assignment
Figure 3-42. Assigning a Wireless Station to a VLAN
Identity-Based, or Dynamic, VLAN Assignment
The Wireless Edge Services xl Module can also divide traffic from wireless
users into VLANs based on those users’ identities. This capability (variously
called user-based, or identity-based, VLANs, as well as dynamic VLAN assign-
ment) allows you to:
■ configure one WLAN for your wireless network with a single SSID and
unified wireless security policy
■ simultaneously retain granular control over the network rights of each
wireless user
In order for your Wireless Edge Services xl Module to implement dynamic
VLAN assignment in a WLAN, the WLAN must use 802.1X authentication. This
is because the module actually receives the VLAN assignment from a RADIUS
server after that server uses 802.1X to authenticate the wireless user.