Vlan; Management Vlan Id; Multi-Ess With Vlan Example - ZyXEL Communications ZyAir Access Point Series User Manual

ZyAIR Access Point Series User's Guide
7.2

VLAN

A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical
networks. Stations on a logical network can belong to one or more groups. Only stations within the same
group can talk to each other.
The ZyAIR supports 802.1q VLAN tagging. Tagged VLAN uses an explicit tag (VLAN ID) in the MAC
header of a frame to identify VLAN membership. The ZyAIR can identify VLAN tags for incoming Ethernet
frames and add VLAN tags to outgoing Ethernet frames.
Configure VLAN (virtual LAN) with multi-ESS to extend the wireless logical grouping to the wired
network. Each ESS is assigned a unique VLAN ID.

7.2.1 Management VLAN ID

The Management VLAN ID identifies the "management VLAN". A device must be a member of this
"management VLAN" in order to access and manage the ZyAIR. If a device is not a member of this VLAN,
then that device cannot manage the ZyAIR.
If no devices are in the management VLAN, then no one will be able to access the ZyAIR and you will have
to restore the default configuration file.

7.2.2 Multi-ESS with VLAN Example

In this example, VLAN 2 is the management VLAN and includes the computers in ESS1 and LAN 1.
Computers in ESS2 and LAN 2 belong to VLAN 2. "Wireless group" ESS1is limited to accessing the
resources on LAN 1 and similarly "wireless group" ESS2 may only access resources on LAN 2.
The switch adds the PVID tag to incoming frames that don't already have tags on switch ports where PVID is
enabled.
7-2 Multiple ESS and VLAN