Allied Telesis AT-WA7500 - Manual (Page 171)

AT-WA7500 User’s Guide
171
5. Select Submit Changes to save your changes. To activate your
changes, select Save/Discard Changes from the menu bar then Save
Changes and Reboot. For help, see Saving Configuration Changes
on page 41.
6. Repeat Steps 1 through 5 for each access point in your spanning tree.
All access points must have the same IAPP secret key to communicate
with each other.
In the access point that contains the master radio, select Maintenance
then AP Connections. The AP Connections screen lists the station radios
(including ones in other access points) that are communicating with the
master radio. For help, see Viewing AP Connections on page 195.
Configuring
VLANs
Virtual LANs (VLANs) make it easy to create and manage logical groups
of wireless end devices that communicate as if they were on the same
LAN. VLANs let you separate secure and non-secure traffic. For example,
you want your access points to pass secure data to your wired network
and you want to provide customers access to the Internet.
The access points support the 802.1Q standard for VLAN tagging. To
configure VLANs in your wireless network, the access point must have
two radios. Each radio can be configured to support one VLAN. You
configure each radio as a master radio with a unique SSID, channel, and
security methodology. Then, you distribute the SSID of the secure
network to your end devices and the SSID of the non-secure network to
your customers.
When the access point receives a frame from an end device, it appends
the appropriate VLAN tag to the frame and then bridges the VLAN-
encapsulated frame to the wired network. If you configure the VLAN
field to 1, no VLAN tag will be appended and the frames will be put on
the wired network as raw Ethernet frames. A VLAN-capable Ethernet
switch receives the VLAN-encapsulated frame and routes it
appropriately. Only VLAN-aware devices understand frames with VLAN
tags; end devices only understand and accept frames that are meant for
them that do not have a VLAN tag.
In order for the spanning tree to work, all access points must be on the
same Native port on the Ethernet switch. The switch must be able to
support a hybrid VLAN, which means the switch can support both VLAN-
tagged and raw Ethernet frames on the switch port. The access point
only encapsulates wireless traffic. Any communication with the access
point across the wired network is always raw Ethernet traffic.