1

What are the common methods to have VLANs on a wireless network through profiles ?

Scenario :

access points ==> wireless controller ==> core switch ==> UTM

there is 3 main profiles for users to access Wireless network , Managers , Users

and Guests .

so basically we need every profile from the mentioned above to be on separate VLAN .

If it can't be done , what are the other scenarios we can adopt to achieve this ?

Improve this question

2 Answers 2

Reset to default
2

Generally, each group has its own SSID, and the SSIDs are mapped to VLANs in the controller. You can have different authentication methods for each SSID.

Improve this answer
3
  • Yes , the SSIDs are mapped to VLANs , But we want to be able to route users traffic through different WAN Gateways and apply different Firewall rules on them ?
    – Moawia307
    Commented Apr 10, 2017 at 11:10
  • That depends on your wired portion of your network, specifically your gateway router(s). If you provide a network diagram and model numbers, we can give you more details.
    – Ron Trunk
    Commented Apr 10, 2017 at 12:09
  • I marked answered because the key word for the whole scenario was the word "mapped" , thanks @Ron
    – Moawia307
    Commented Apr 13, 2017 at 12:25
0

In addition to what Mr. Trunk said:

Assuming your WiFi uses WPA2 enterprise, you'd have some kind of authentication server that would authenticate (or deny access) centrally, and communicate settings such as the IP address to be assigned to a station to the access point.

I haven't read into the underlying 802.11 standard (I think it's 11x) deeply enough, but my impression was that also things like routes to be set up can be communicated.

Anyway, with wpa2 enterprise, the network is already segregated, and users can't read the traffic of other users on the same network, and vlan tagging should be doable on addresses alone in your access point

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.