topic Separate management Vlan in Wireless

Separate management Vlan

Toscana — Tue, 18 Jan 2022 18:14:38 GMT

Hi,

we're planning to deploy 9120AXI access points in two of our branches. At each site there is one access point with EWC on board. APs are connected to the access switches (2960-XR), together with all other clients (ip phones, computers etc.) We intend to setup two SSIDs on each branch, enclosed in separate Vlans. Looks roughly like this:
Vlan 10 - data
Vlan 20 - voice
Vlan 30 - SSID 1
Vlan 40 - SSID 2

Is it possible/intended by the manufacturer to manage the master AP (EWC) via separate management Vlan (e.g. Vlan 10) and to keep Wifi traffic completely off this vlan? Could be like that:
Master AP: Vlan 10,30,40
Slave AP: Vlan 30,40

Additional: How does master AP provide configuration changes to the satellites?

Thanks for any comment, folks. Regards
Stefano

Re: Separate management Vlan

Wes Schochet — Tue, 18 Jan 2022 21:00:32 GMT

In this scenario, you'd create trunks for all APs and have their management / native VLAN be 10. The only time traffic would hit 30 or 40 is when the flex policy (or flex group) associated the SSID to that VLAN.

Re: Separate management Vlan

Rich R — Wed, 19 Jan 2022 14:21:23 GMT

The EWC AP and the subordinate APs must talk to each other over the management VLAN so:

Master AP: Vlan 10 (native),30,40
Slave AP: Vlan 10 (native),30,40

So to answer your question the master will talk to the slaves over vlan 10.

The WiFi user traffic is switched over vlan 30 and 40.

Re: Separate management Vlan

Scott Fella — Thu, 20 Jan 2022 18:54:07 GMT

Just to add, why not create a vlan just for your ap's, this way the traffic is separate fro all the data traffic?