Native VLAN and VLAN ID on Wireless Mobility Controller

[kkhanh]

Hi,

This question has been asked thousand times and yet I still don't understand the usefulness of vlan native combined with a vlan tagged id in a wireless environment as shown in this screenshot :

This is a configuration for one SSID (wlan1).

To make thing simple, let's say the AP is plugged directly to a router that deliver a vlan on its native vlan port (pvid 1 untagged) and also a second vlan tagged on vlan 30.

Now if you connect to SSID wlan1, you will be in VLAN30 correct ?

If I were to broadcast a SSID to deliver the native router vlan, I would simply create SSID wlan2 with "Use VLAN Tagging" turn to "No".

So whats the point of having to configure both Native VLAN and VLAN ID for one SSID ?

What would be the side effect of configuring "Native VLAN ID" to 500 on wlan1 ? I would still be on VLAN30 right ?

Thanks

[Mark Elsen]

 - It could be that this is still needed to make the controller behave compliant w.r.t. managerial data and the back-end Intranet networking environment/setup.

 M.

[Rasika Nayanajith]

So whats the point of having to configure both Native VLAN and VLAN ID for one SSID ?

If you want to support multiple vlan on this AP, then you need to pass multiple vlan on that switchport where AP plug into. So the option is to configure that port as 802.1Q trunk port. With trunk port configuration you have to configure a native-vlan on both sides (switch/modem and AP)

Most switch devices, use vlan 1 as native when you configure as trunk. Anyway better to configure it explicitly and other than 1 for better security.

What would be the side effect of configuring "Native VLAN ID" to 500 on wlan1 ? I would still be on VLAN30 right ?

Then you have to configure same native vlan on your modem/swtich for the switchport configure for this AP. Otherwise you will have native vlan mismatch and you cannot pass vlan 30 traffic to AP as you expected.

HTH

Rasika

*** Pls rate all useful responses ***

[kkhanh]

edit bug

[kkhanh]

edit bug

[kkhanh]

Why is my answer always deleted ?

[kkhanh]

Hi,

Thanks for answering.

Your first point :

Your example would make sense in a switch <---> switch scenario. But I have to disagree with you in a switch <---> ap setup
Lets say I have 3 VLAN tagged (10, 11, 12) that I need to broadcast on my AP.
I would create 3 SSID with the following configuration :

wlan1 : Native VLAN ID : 1 and VLAN ID : 10
wlan2 : Native VLAN ID : 1 and VLAN ID : 11
wlan3 : Native VLAN ID : 1 and VLAN ID : 12

What bothers me is that the following configuration would give me the same working result :

wlan1 : Native VLAN ID : 1 and VLAN ID : 10
wlan2 : Native VLAN ID : 50 and VLAN ID : 11
wlan3 : Native VLAN ID : 100 and VLAN ID : 12

Your second point :

As mentioned above, mismatch vlan does not have any consequence on a switch <---> ap setup and I can actually pass all the 3 VLAN.

Thus and until proven otherwise, Native VLAN ID is useless and does not make any sense when it comes to configuring a SSID