Vlan Configuration Example - Cisco M10-RM Software Manual

VLAN Configuration Example

Virtual-Dot11Radio0
Protocols Configured:
Virtual LAN ID:
vLAN Trunk Interfaces:
FastEthernet0.2
Virtual-Dot11Radio0.2
Protocols Configured:
VLAN Configuration Example
This example shows how to use VLANs to manage wireless devices on a college campus. In this
example, three levels of access are available through VLANs configured on the wired network:
•
•
•
In this scenario, a minimum of three VLAN connections are required, one for each level of access.
Because the access point can handle up to 16 SSIDs, you can use the basic design shown in
Table 14-1
Level of Access
Management
Faculty
Student
Managers configure their wireless client adapters to use SSID boss, faculty members configure their
clients to use SSID teach, and students configure their wireless client adapters to use SSID learn. When
these clients associate to the access point, they automatically belong to the correct VLAN.
You would complete these steps to support the VLANs in this example:
1.
2.
3.
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
14-10
Bridging Bridge Group 1
Bridging Bridge Group 1
Bridging Bridge Group 1
2 (IEEE 802.1Q Encapsulation)
Management access—Highest level of access; users can access all internal drives and files,
departmental databases, top-level financial information, and other sensitive information.
Management users are required to authenticate using Cisco LEAP.
Faculty access—Medium level of access; users can access school's Intranet and Internet, access
internal files, access student databases, and view internal information such as human resources,
payroll, and other faculty-related material. Faculty users are required to authenticate using Cisco
LEAP.
Student access—Lowest level of access; users can access school's Intranet and the Internet, obtain
class schedules, view grades, make appointments, and perform other student-related activities.
Students are allowed to join the network using static WEP.
Access Level SSID and VLAN Assignment
SSID
boss
teach
learn
Configure or confirm the configuration of these VLANs on one of the switches on your LAN.
On the access point, assign an SSID to each VLAN.
Assign authentication types to each SSID.
Address: Received:
Dot11Radio0.2
Address: Received:
VLAN ID
01
02
03
Chapter 14
Transmitted:
201688
201688
201688
Transmitted:
Configuring VLANs
0
0
0
Table 14-1.
OL-14209-01