We here at Liberty University have the APs n their own VLANs, but that is a continuation of our previous standard. Some wireless vendors suggest having the APs on the data VLANs for better rogue detection.
We have found that the AP switch ports need different QoS settings than regular data ports. On the AP ports the network needs to trust the QoS (DSCP)markings from the AP for the tunnel packets. This is especially true if you are using wireless voice or video. It is generally not good practice to trust any QoS markings from an end user. Bruce Osborne Wireless Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY 40 Years of Training Champions for Christ: 1971-2011 From: Entwistle, Bruce [mailto:bruce_entwis...@redlands.edu] Sent: Wednesday, June 08, 2011 6:55 PM Subject: Wireless design We will soon be migrating our wireless network from Cisco autonomous 1231 APs to a combination of Cisco 3502i along with some of the existing 1231 APs converted to lightweight. As we prepare for this we are looking at how to best architect the new network. The new network will cover the entire campus which consists of approx 50 buildings, with each building having its' own VLAN. The initial idea was to install the APs so the IP address of the AP would be a part of the local building VLAN. This is the IP the AP would use to talk back to the controller. For user connections there would be two VLANs created which would be accessed through a single SSID. The users would then be dynamically assigned to one of the two VLANs based on their logon credentials. Currently all users are placed on the same VLAN after authentication, as our current installation is not capable of dynamic VLAN assignment. There is currently only a single SSID in place. I would be interested to know what other have done and how successful it was. Thank you Bruce Entwistle Network Manager University of Redlands ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
