Pass-Through Vlans; Termination Vlans; Figure A-2: A Pass-Through Vlan; Figure A-3: A Termination Vlan - ADTRAN BlueSecure Controller Setup And Administration Manual

number. VLAN interfaces support all of the authentication types and services supported
by the physical interfaces.
On the BSC, you can set up these types of VLANs:
•

Pass-Through VLANs

•

Termination VLANs

• Initiation/Switched VLANs
Pass-Through VLANs
Pass-through VLANs on the BSC receive 802.1q-tagged packets from one physical
interface (typically the managed side) and forward them with the same tag to the
outgoing physical interface (protected side). To create pass-through VLANs, you must
assign the same ID number to VLANs on both the managed and protected sides, as
shown in Figure A-2.The managed and protected VLANs can be on the same or different
subnets, in the same way the managed and protected physical intefaces can be on the
same or different subnets..
See "Creating a VLAN on the Protected Side (Optional)" on page 4-5 for information on
creating a VLAN on the protected interface. See "Creating a VLAN on the Managed Side
of Your Network" on page 4-17 for information on creating a VLAN on the managed
interface.
Termination VLANs
Termination VLANs on the BSC receive 802.1q-tagged packets from the managed side
and forward them with no tag to the protected side. However, unlike pass-through
VLANs, there is no VLAN with the same ID on the protected side. This causes all traffic for
the VLAN to terminate on the managed side of the BSC, as shown in Figure A-3.
BlueSecure™ Controller Setup and Administration Guide
MAC Frame
7x 8x 9x 10x 11x 12x 7x 8x 9x 10x 11x 12x
C
7 8 9 1011 12
A 1 2 3 4 5 6 1x 2x 3x 4x 5x 6x 1x 2x 3x 4x 5x 6x
A B
Switch
Access
Point
Untagged VLAN
Managed Side

Figure A-2: A Pass-through VLAN

MAC Frame
7x 8x 9x 10x 11x 12x 7x 8x 9x 10x 11x 12x
C
7 8 910 11 12
A 1 2 3 4 5 6
1x 2x 3x A 4x 5x 6x 1x 2x 3x B 4x 5x 6x
Switch
Access
Point
Untagged VLAN
Managed Side

Figure A-3: A Termination VLAN

Tagged VLAN ID 2
BlueSecure
Controller
VLAN 2 VLAN 2
Power Reset
WG-2100 Wireless Gateway
Tag
MAC Frame
Tagged VLAN ID 2
Tagged VLAN ID 2
BlueSecure
Controller
VLAN 2 Reset
Power
WG-2100 Wireless Gateway
Tag
MAC Frame
Untagged VLAN ID 2
Protected
Network
Tag MAC Frame
Protected Side
No VLAN ID 2 traffic to
Protected Network
Protected
Network
MAC Frame
Protected Side
A-3