Incorporating Wireless Devices Into Vlans; Configuring Vlans; Configuring A Vlan - Cisco Aironet 1100 Series Installation And Configuration Manual

Configuring VLANs

Incorporating Wireless Devices Into VLANs

The basic wireless components of a VLAN consist of an access point and a client associated to it using
wireless technology. The access point is physically connected through a trunk port to the network VLAN
switch on which the VLAN is configured. The physical connection to the VLAN switch is through the
access point's Ethernet port.
In fundamental terms, the key to configuring an access point to connect to a specific VLAN is by
configuring its SSID to recognize that VLAN. Since VLANs are identified by a VLAN ID, it follows
that if the SSID on an access point is configured to recognize a specific VLAN ID, a connection to the
VLAN is established. When this connection is made, associated wireless client devices having the same
SSID can access the VLAN through the access point. The VLAN processes data to and from the clients
the same way that it processes data to and from wired connections. You can configure up to 16 SSIDs
on your access point, so you can support up to 16 VLANs.
You can use the VLAN feature to deploy wireless devices with greater efficiency and flexibility. For
example, one access point can now handle the specific requirements of multiple users having widely
varied network access and permissions. Without VLAN capability, multiple access points would have to
be employed to serve classes of users based on the access and permissions they were assigned.
These are two common strategies for deploying wireless VLANs:
•
•
Configuring VLANs
These sections describe how to configure VLANs on your access point:
•
•
•

Configuring a VLAN

Configuring your access point to support VLANs is a three-step process:
1.
2.
3.
This section describes how to assign SSIDs to VLANs and how to enable a VLAN on the access point
radio and Ethernet ports. For detailed instructions on assigning authentication types to SSIDs, see
Chapter 10, "Configuring Authentication Types."
see
Cisco Aironet 1100 Series Access Point Installation and Configuration Guide
12-4
Segmentation by user groups: You can segment your wireless LAN user community and enforce a
different security policy for each user group. For example, you can create three wired and wireless
VLANs in an enterprise environment for full-time and part-time employees and also provide guest
access.
Segmentation by device types: You can segment your wireless LAN to allow different devices with
different security capabilities to join the network. For example, some wireless users might have
handheld devices that support only static WEP, and some wireless users might have more
sophisticated devices using dynamic WEP. You can group and isolate these devices into separate
VLANs.
Configuring a VLAN, page 12-4
Using a RADIUS Server to Assign Users to VLANs, page 12-6
Viewing VLANs Configured on the Access Point, page 12-6
Assign SSIDs to VLANs.
Assign authentication settings to SSIDs.
Enable the VLAN on the radio and Ethernet ports.
Chapter 8, "Configuring Multiple SSIDs."
Chapter 12
For instructions on assigning other settings to SSIDs,
Configuring VLANs
OL-2851-01