Chapter 12
W310 WLAN Gateway Wireless Features
VLAN
The W310 allows you to segment wireless networks into multiple sub-networks based on
Network Name (SSID) and VLAN membership.
A Network Name (SSID) identifies a wireless network. Clients associate with Access Points
that share its SSID. After initial setup, an AP can be configured to support up to 16 SSIDs
per wireless interface to segment wireless networks based on VLAN membership.
VLAN Overview
Virtual Local Area Networks (VLANs) are logical groupings of network hosts. Defined by
software settings, other VLAN members or resources appear (to clients) to be on the same
physical segment, no matter where they are attached on the logical LAN or WAN segment.
They simplify traffic flow between clients and their frequently-used or restricted resources.
VLANs now extend as far as the reach of the access point signal. Clients can be segmented
into wireless sub-networks via SSID and VLAN assignment. A client can access the network
by connecting to an AP configured to support its assigned SSID/VLAN.
W110 (LAP) devices are fully VLAN-ready, however, by default VLAN support is disabled.
Before enabling VLAN support, certain network settings should be configured, and network
resources such as a VLAN-aware switch, a RADIUS server, and possibly a DHCP server
should be available.
Once enabled, VLANs are used to conveniently, efficiently, and easily manage your network
in the following ways:
•
Manage adds, moves, and changes from a single point of contact
•
Define and monitor groups
•
Reduce broadcast and multicast traffic to unnecessary destinations
— Improve network performance and reduce latency
•
Increase security
— Secure network restricts members to resources on their own VLAN
— Clients roam without compromising security
VLAN tagged data is collected and distributed through an AP's wireless interface(s) based
on Network Name (SSID). An Ethernet port on the access point connects a wireless cell or
network to a wired backbone, in this case the W310. The access points communicate across a
VLAN-capable switch (W310) that analyzes VLAN-tagged packet headers and directs
traffic to the appropriate ports. On the wired network, a RADIUS server authenticates traffic
and a DHCP server manages IP addresses for the VLAN(s). Resources like servers and
printers may be present, and a hub may include multiple APs, extending the network over a
larger area.
166
Avaya W310 User's Guide