Motorola RFS7000 Reference Manual page 245

Once the client has got a virtual IP, further packets from the client within the IPSec tunnel
are routed to the corresponding VLAN interface (in our case vlan3), and the client gets
access to the network. The IPSec tunnel is only between the client and the switch. After
that the packets on the trusted side are sent without encryption.
NOTE: The example below is for a IPSec-L2TP connection over a mobile
unit. Use a windows default client for this configuration.
1. Create and configure a WLAN.
RFSwitch(config)#
RFSwitch(config)#wireless
RFSwitch(config-wireless)#wlan 2 enable
RFSwitch(config-wireless)#wlan 2 ssid MONARCH2
RFSwitch(config-wireless)#wlan 2 vlan 2
2. Create and configure DHCP.
RFSwitch(config)#ip dhcp pool vlan2
RFSwitch(config-dhcp)#address range 10.1.1.2 10.1.1.254
RFSwitch(config-dhcp)#default-router 10.1.1.1
RFSwitch(config-dhcp)#network 10.1.1.0/24
3. Create and configure a VLAN interface named vlan2.
RFSwitch(config)#interface vlan2
RFSwitch(config-if)#ip address 10.1.1.1/24
4. Create and configure another VLAN interface named vlan3.
RFSwitch(config)#interface vlan 3
RFSwitch(config-if)#ip address dhcp
Global Configuration Commands 5-29