Specifications

BlueSecure™ Controller Setup and Administration Guide A-3
number. VLAN interfaces support all of the authentication types and services supported
by the physical interfaces.
On the BSC, you can set up these types of VLANs:
• Pass-Through VLANs
• Termination VLANs
• Initiation/Switched VLANs
Pass-Through VLANs
Pass-through VLANs on the BSC receive 802.1q-tagged packets from one physical
interface (typically the managed side) and forward them with the same tag to the
outgoing physical interface (protected side). To create pass-through VLANs, you must
assign the same ID number to VLANs on both the managed and protected sides, as
shown in Figure A-2.The managed and protected VLANs can be on the same or different
subnets, in the same way the managed and protected physical intefaces can be on the
same or different subnets..
See “Creating a VLAN on the Protected Side (Optional)” on page 4-5 for information on
creating a VLAN on the protected interface. See “Creating a VLAN on the Managed Side
of Your Network” on page 4-17 for information on creating a VLAN on the managed
interface.
Termination VLANs
Termination VLANs on the BSC receive 802.1q-tagged packets from the managed side
and forward them with no tag to the protected side. However, unlike pass-through
VLANs, there is no VLAN with the same ID on the protected side. This causes all traffic for
the VLAN to terminate on the managed side of the BSC, as shown in Figure A-3.
Figure A-2: A Pass-through VLAN
Figure A-3: A Termination VLAN
Power Reset
D
I
S
K
P
W
R
WG-2100 Wireless Gateway
123456
789101112
A
B
12x
6x
8x
2x
9x
3x
10x
4x
11x
5x
7x
1x
Ethernet
A
12x
6x
8x
2x
9x
3x
10x
4x
11x
5x
7x
1x
C
MAC Frame
Untagged VLAN
MAC FrameTag
Tagged VLAN ID 2
VLAN 2 VLAN 2
Tagged VLAN ID 2
MAC FrameTag
BlueSecure
Controller
Switch
Protected
Network
Access
Point
Managed Side Protected Side
Power
Reset
D
I
S
K
P
W
R
WG-2100 Wireless Gateway
123456
78 9101112
A
B
12x
6x
8x
2x
9x
3x
10x
4x
11x
5x
7x
1x
Ethernet
A
12x
6x
8x
2x
9x
3x
10x
4x
11x
5x
7x
1x
C
MAC Frame
Untagged VLAN
MAC Frame Tag
Tagged VLAN ID 2
VLAN 2
Untagged VLAN ID 2
BlueSecure
Controller
Switch
Protected
Network
Access
Point
Managed Side Protected Side
MAC Frame
No VLAN ID 2 traffic to
Protected Network