Working with VLANs
Traffic flow examples
7-10
Terms used in the tables
Egress network in VSC binding: This column refers to the Egress network option that
can be configured when an AP group is bound to a VSC. The egress network can be used
to assign a specific VLAN. How this VLAN is applied to the routing of traffic is illustrated
by the tables.
Client data tunnel: The client data tunnel can be used by an AP to transport wireless
user traffic to the controller. The client data tunnel is automatically used if the network
path between an AP and the controller traverses a router. In the case where the AP is on
the same layer 2 subnet as the controller, the client data tunnel is not automatically used,
but can be manually activated by enabling the Always tunnel client traffic option on
the VSC configuration page. Available on access-controlled VSCs only.
User-assigned VLAN is not assigned via RADIUS or local user accounts: This
column indicates what happens when a user-assigned VLAN attribute is not assigned via
RADIUS or via a local user account or account profile.
User-assigned VLAN exists in the mobility domain: This column indicates what
happens when a user-assigned VLAN attribute is assigned via RADIUS or via a local user
account or account profile, and if that VLAN (or network) is defined within the mobility
domain. In some cases the behavior is different if the VLAN attribute specifies a network
profile name or an actual VLAN ID (number).
User-assigned VLAN does not exist in the mobility domain: This column indicates
what happens when a user-assigned VLAN attribute is assigned via RADIUS or via a local
user account or account profile, and if that VLAN (or network) is not defined within the
mobility domain. In some cases the behavior is different if the VLAN attribute specifies a
network profile name or an actual VLAN ID (number).
Traffic flow examples
The following examples illustrate some typical VLAN scenarios using the information from
the tables in section Traffic flow for wireless users on page 7-6.
To help cross-reference with the tables, all configuration settings are shown using the
headings and descriptions from the tables.
Example 1: Overriding the VSC egress on a
controller with a user-assigned VLAN
This example illustrates how a user-assigned VLAN can override a VSC egress setting on the
controller.
Configuration summary
APs are bound to a VSC that has Wireless mobility disabled
VSC type: Access controlled