Motorola T2-2500 ユーザーズマニュアル
VLAN
Tutorials
Motorola, Inc.
549453-001-00-a
Page 38 of 51
V
V
L
L
A
A
N
N
T
T
u
u
t
t
o
o
r
r
i
i
a
a
l
l
s
s
T
T
u
u
t
t
o
o
r
r
i
i
a
a
l
l
1
1
:
:
S
S
i
i
m
m
p
p
l
l
e
e
H
H
o
o
t
t
e
e
l
l
c
c
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
When using a Nomadix subscriber gateway, a special VLAN configuration is required to support unique authentication
options for each group of subscribers. For example, in a hotel with both a wired and wireless Internet access, the
gateway must use a VLAN ID to identify all users from the wireless network, and a different VLAN ID to identify all
users from the wired network. Thus, every user on the mT2 must have the same VLAN ID.
In order to accomplish this, while still maintaining port-to-port privacy, follow this tutorial.
options for each group of subscribers. For example, in a hotel with both a wired and wireless Internet access, the
gateway must use a VLAN ID to identify all users from the wireless network, and a different VLAN ID to identify all
users from the wired network. Thus, every user on the mT2 must have the same VLAN ID.
In order to accomplish this, while still maintaining port-to-port privacy, follow this tutorial.
Privacy and QoS in this network:
• Every WallPlate will have the same VLAN IDs
• Privacy enforced between rooms by the port privacy feature on the mT2 switch
• QoS is not used
• Privacy enforced between rooms by the port privacy feature on the mT2 switch
• QoS is not used
VLAN-Ids used in this tutorial:
• 100
VLAN used for all wired ports in the network. This VLAN will transmit on the upstream network
Third party network configuration:
The mT2 switches will connect to an upstream switch; likely a Cisco or HP. Both these brands offer a port privacy
feature that does not rely on 802.1Q VLANs; similar to the function of Port Privacy in the mT2 switch. It is
recommended that port isolation be implemented on all aggregation switches upstream of the mT2.
feature that does not rely on 802.1Q VLANs; similar to the function of Port Privacy in the mT2 switch. It is
recommended that port isolation be implemented on all aggregation switches upstream of the mT2.
Enable and create VLANs
vlan enable
vlan mode local-mode port-based remote-mode tag-based
system reboot
vlan add vlan-id 100
vlan mode local-mode port-based remote-mode tag-based
system reboot
vlan add vlan-id 100
Assign the PVID for the WallPlate ports
vlan interface ingress port(1-25)-(1-2) pvid 100
Assign VLAN memberships to WallPlate ports
vlan membership add 100 interface port(1-25)-(1-2)