Working with VSCs
VSC configuration options
5-17
If a VSC is bound to the MSM317 Ethernet Switch, it cannot handle traffic from wireless
clients on the MSM317 or other APs.
For more information, see VSC data flow on page 5-32 and Traffic flow for wireless users on
page 7-6.
VSC egress mapping
These options select the output interface on the controller on which an access-controlled
VSC forwards user traffic. Different egress mappings can be defined depending on whether
the user is unauthenticated, authenticated, or being intercepted. (To enable traffic
interception for a specific user, you must specify the appropriate setting in the user’s RADIUS
account. See Colubris-Intercept on page 15-25.)
Different types of traffic can be forwarded to different output interfaces, which include: the
routing table, VLAN ID, or an IP GRE tunnel. Before you can map traffic to an output
interface, the interface must already be defined. For VLANs to appear in the selection list
they must be assigned an IP address. (Define VLANs on the Controller >> Network > Ports
page.)
When the Default option is selected, the controller routing table is used for all egress traffic.
Therefore, all traffic on this VSC is routed according to the routes defined on the Controller
>> Network > IP routes page.
For more information, see VSC data flow on page 5-32 and Traffic flow for wireless users on
page 7-6.
Note To set VSC egress options for controlled APs, see Binding VSCs to groups on page 6-23. On
the MSM317, VSCs can also be bound directly to the switch ports. See the MSM317 Access
Device Installation and Getting Started Guide.
Bandwidth control
This option is only available if the Internet port data rate limits option is enabled on the
Controller >> Network > Bandwidth control page. See Bandwidth control on page 3-21.
Select the bandwidth control level to regulate traffic flow for all user traffic handled by this
VSC. Bandwidth levels are defined on the Controller >> Network > Bandwidth control
page.
This default setting applies to all users that do not have a bandwidth level assigned in their
account (local or RADIUS). Local accounts are defined on the Users menu.