64 CHAPTER 3: CONFIGURING WIRELESS SERVICES
The 802.1X Service Profile wizards uses the ** userglob in the access
rule. You can use this rule, modify it, or delete it and create a new one.
You also can create additional rules. For syntax information, see the
“Wireless Service Parameters” section in the “Configuring Wireless
Parameters” chapter of the Wireless LAN Switch Manager Reference
Manual.
To modify or create access rules
See the “Modifying SSID Encryption Settings and Access Rules” section in
the “Configuring Wireless Parameters” chapter of the Wireless LAN
Switch Manager Reference Manual.
Set Up VLANs on WX Switches
WX switches in a Mobility Domain contain a user’s traffic within the
VLAN the user is assigned to. For example, if you assign a user to VLAN
red, the WX switches in the Mobility Domain contain the user’s traffic
within VLAN red configured on the switches. The VLANs you set up for
service sets support wireless users—they don’t serve as management
VLANs.
If a WX is connected to the network by only one IP subnet, the WX must
have at least one VLAN configured. Optionally, each VLAN can have its
own IP address. However, no two IP addresses on the switch can belong
to the same IP subnet. User VLANs must be defined on at least one WX
switch within the Mobility Domain.
You can configure the Spanning Tree Protocol (STP) on a VLAN. STP is
used to maintain a loop-free network; meaning, devices will recognize a
loop in the topology and block one or more redundant paths, creating a
loop-free path.
The Mobility System Software (MSS) supports Per-VLAN Spanning Tree
protocol (PVST). PVST allows a separate spanning tree in each VLAN. STP,
disabled by default on all VLANS, is configurable for individual VLANs.
STP does not run on MAP ports or wired authentication ports and does
not affect traffic flow on these port types.
To set up a VLAN on a WX switch
1Select Configuration on the toolbar.
2In the Organizer panel, expand the WX switch.
3Expand System, then select VLANs.