Mobility traffic manager
Scenario 4: Assigning home networks on a per-user basis
9-39
A single VSC is used in this scenario. It is configured with the Wireless mobility, Mobility
traffic manager option enabled. Home network assignment for users is done by setting
RADIUS VLAN attributes which map users to one of two network profiles:
Each profile must be assigned to an AP as well as a controller. This is done to ensure that
when a user logs in on an AP installed on the same subnet as the home network, traffic is not
routed through the controller, but is sent directly onto the network via the Ethernet port not
the AP. For example:
When User A logs onto AP 1, RADIUS returns the VLAN ID Net1. Since Net1 is defined as
a home network on AP 1, traffic is sent directly onto network 1 via the Ethernet port on
the AP.
When User A roams to (or logs into) AP 2, RADIUS returns the VLAN ID Net1. Since Net1
is not defined as a home network on AP 2, MTM tunnels the user’s traffic back to
network 1.
A RADIUS account is defined for each user with attributes set as follows to identify the home
network using a network profile name:
Configuration overview
The following sections provide a summary of the configuration settings needed to enable
mobility support only. It is assumed that installation and configuration of all controllers and
APs so that they are fully operational on the network was performed as explained in the other
chapters in this guide.
Network profile name Assigned to
Net1 Controller 1 LAN port
All APs attached to network 10.0 use this as their home
network
Net2
Controller 2 LAN port
All APs attached to network 20.0 use this as their home
network
RADIUS attribute Network 1 users Network 2 users
Tunnel-Medium-Type 802 802
Tunnel-Private-Group-ID Net1 Net2
Tunnel-Type VLAN VLAN
To Next Page
Loading...
Need help?
General
