Configuring And Managing Vlans; Understanding Vlans In Mss; Vlans, Ip Subnets, And Ip Addressing - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Configuring and Managing VLANs

Note: The CLI commands in this chapter configure VLANs on switch network ports. The commands do
not configure VLAN membership for wireless or wired authentication users. To assign a user to a VLAN,
configure the RADIUS Tunnel-Private-Group-ID attribute or the VLAN-Name vendor specific attribute
(VSA) for that user.

Understanding VLANs in MSS

A virtual LAN (VLAN) is a Layer 2 broadcast domain that can span multiple wired or wireless LAN
segments. Each VLAN is a separate logical network and, if you configure IP interfaces on the VLANs,
MSS treats each VLAN as a separate IP subnet.
Only network ports can be preconfigured to be members of one or more VLAN(s). You configure VLANs
on a switch's network ports by configuring them on the switch itself. You configure a VLAN by assigning
a name and network ports to the VLAN. Optionally, you can assign VLAN tag values on individual
network ports. You can configure multiple VLANs on a switch's network ports. Optionally, each VLAN
can have an IP address.
VLANs are not configured on AP access ports or wired authentication ports, because the VLAN
membership of these types of ports is determined dynamically through the authentication and
authorization process. Users who require authentication connect through switch ports that are configured
for access points or wired authentication access. Users are assigned to VLANs automatically through
authentication and authorization mechanisms such as 802.1X.
By default, none of a switch's ports are in VLANs. A switch cannot forward traffic on the network until
you configure VLANs and add network ports to those VLANs.
Note: A wireless client cannot join a VLAN if the physical network ports on the switch in the VLAN
are down. However, a wireless client that is already in a VLAN whose physical network ports go down
remains in the VLAN even though the VLAN is down.

VLANs, IP Subnets, and IP Addressing

Generally, VLANs are equivalent to IP subnets. If a switch is connected to the network by only one IP
subnet, the switch must have at least one VLAN configured. Optionally, each VLAN can have its own IP
address. However, no two IP addresses on the switch can belong to the same IP subnet.
You must assign the system IP address to one of the VLANs, for communications between switches
and for unsolicited communications such as SNMP traps and RADIUS accounting messages. Any IP
address configured on a switch can be used for management access unless explicitly restricted.
D-Link DWS-1008 User Manual 8