Restricting Layer 3 Traffic Among Clients In A Vlan; Changing The Tunnel Affinity Of A Vlan - 3Com WX4400 Reference Manual

Restricting Layer 3
Traffic Among Clients
in a VLAN
Changing the Tunnel
Affinity of a VLAN
To restrict Layer 3 traffic among clients in the same VLAN, use an ACL.
You can configure the ACL yourself or use the Restrict L3 Traffic option in
3WXM.
1 Access the VLAN table:
a Select the Configuration tool bar option.
b In the Organizer panel, click the plus sign next to the WX switch.
c Click the plus sign next to System.
d Select VLANs.
2 In the Content panel, select the VLAN.
3 In the Task List panel, select Restrict L3 Traffic.
4 Type the IP address of the default router (gateway) of a VLAN.
5 Click Next.
The ACL 3WXM will configure to block the traffic is displayed.
6 Read the information on the wizard page about the ACL. If you need to
modify the ACL, see "Viewing and Configuring ACLs" on page 230.
7 Click Finish.
WX switches configured to comprise a Mobility Domain allow users to
roam seamlessly across MAP access points and across WX switches.
Although a WX that is not a member of a user's VLAN cannot directly
forward traffic for the user, the WX can tunnel the traffic through
another WX that is a member of the user's VLAN.
If a WX that is not in the user's VLAN has a choice of more than one
other WX through which to tunnel the user's traffic, the WX selects the
path based on the tunnel affinity value. This is a numeric value that each
WX within the Mobility Domain advertises for each of its local VLANs to
all other WX switches in the Mobility Domain. The WX the user is
roaming from selects the WX with the highest affinity value for the user's
VLAN as the path for the user's data. If two or more WX switches have
the same tunnel affinity value, the WX the user is roaming from randomly
selects a WX.
1 Access the VLAN table:
a Select the Configuration tool bar option.
b In the Organizer panel, click the plus sign next to the WX switch.
Viewing and Configuring VLANs 227