Search the Community

I'm trying to get my head around VLANs in order to get a suitable BYOD system going. I've given up with wpad and pac as I think it'll end up with a queue at our door each lesson. I want to have a proper go at this next week (half term), but had a preliminary look yesterday and last night and am even more confused now than I was before - it's entirely possible that I've fundamentally misunderstood something here! Our Ruckus system sends out two WLANs for our stuff here (one for our laptops etc whose key rarely changes, and one for stuff such as staff phones whose key does change periodically). There are currently no (well, one, I suppose) VLANs; I haven't configured any - everything is set to VLAN1 and PVID1 as it came out of the box. I'm adding another WLAN, with AD Authentication, for pupil BYOD. Ruckus appears to be able to add a VLAN tag to traffic from a particular WLAN, so I'm setting the BYOD to VLAN2. So far I think I'm ok - now comes the sketchy bit that I need to check; please can someone confirm that the logic here is correct before I break my network (we have Netgear FSM726 switches if that helps / makes a difference)? I have a Smoothwall transparent proxy to sit between the VLANs, provide DHCP for the BYOD, and send everything to the LEA proxy; so I need the "green" connected to VLAN2 (that is a port with a PVID set to 2) and the "Red" connected to VLAN1 (like everything else on the network is at the moment)? The port that the access point comes into the switch on needs to be a trunk, as it carries traffic on both VLANs, as do all the connections between switches that carry BYOD traffic? Does the zonedirector need a trunk as well or does the traffic go straight from the AP into the network? Here's a diagram of what I'm trying to do in case it's easier (just one switch shown here) Now, to muddy the waters somewhat, I tried setting that up last night, setting green to 10.x.x.6 and red to 10.x.x.7 . before fiddling with any switch port settings. With my workstation connected to the same switch (wired) I set off a ping, pinging both addresses and another which is an-other server. When I changed the PVID of the green port on the switch, I was expecting to stop getting pings back from it, but I expected the red to carry on replying; but they both stopped... "an-other" kept going - reversibly and reproducably - what's going on there please? Many thanks!