Installation guide

Device Configuration
ORiNOCO® 802.11n Access Points - Software Management Guide 68
5.7 Virtual Local Area Network (VLAN)
Virtual Local Area Network (VLAN) is the logical grouping of network hosts. The VLAN members appear (to clients) to be on
the same physical segment as others, no matter where they are available on the logical LAN or WAN segment. They simplify
traffic flow between clients, and their frequently used or restricted resources.
In a BSS, clients can be segmented into wireless sub-networks via SSID and VLAN assignment. A client can access the network
by connecting to the AP device, configured to support its assigned SSID/VLAN.
The AP devices are fully VLAN-ready; however, by default VLAN support is disabled. Before enabling VLAN support, certain
network settings should be configured, and network resources such as a VLAN-aware switch, a RADIUS server, and possibly a
DHCP server should be available.
Once enabled, VLANs are used to conveniently, efficiently, and easily manage your network in the following ways:
• Manage adds, moves, and changes from a single point of contact
• Define and monitor groups
• Reduce broadcast and multicast traffic to unnecessary destinations
— Improve network performance and reduce latency
• Increase security
— Secure network restricts members to resources on their own VLAN
— Clients roam without compromising security
VLAN tagged data is collected and distributed through the AP device’s wireless interface(s) based on their network names
(SSID). An ethernet port on the Access Point connects a wireless cell or network to a wired backbone. The Access Points
communicate across a VLAN-capable switch that analyzes VLAN-tagged packet headers and directs traffic to the appropriate
ports. On the wired network, a RADIUS server authenticates traffic and a DHCP server manages IP addresses for the VLAN(s).
Resources like servers and printers may be present, and a hub may include multiple devices, extending the network over a
larger area.
Access Points that are not VLAN-capable typically transmit broadcast and multicast traffic to all wireless Network Interface
Cards (NICs). This process wastes wireless bandwidth and degrades throughput performance. In comparison, a VLAN-capable
AP device is designed to efficiently manage delivery of broadcast, multicast, and unicast traffic to wireless clients.
The AP device assigns VLAN to the clients, based on a Network Name (SSID). Multiple SSIDs can have same VLAN ID. The
device supports up to 8 SSIDs/VLAN per radio.
The AP device matches the packets transmitted or received to a network name with the associated VLAN. Traffic received by a
VLAN is only sent on the wireless interface associated with that same VLAN. This eliminates unnecessary traffic on the wireless
LAN, conserving bandwidth and maximizing throughput.
Navigate to CONFIGURATION > VLAN. The VLAN screen appears.
Figure 5-30 VLAN