Modern enterprise access points support multiple SSIDs per AP, which can be mapped to VLANs and then trunked back to the LAN via 802.1Q. The SSID-to-VLAN mapping can occur automatically based on security settings. This does not separate the broadcast or collision domains, it only creates different logical segments.
For example, you can have an SSID called “guest” that has no security and another SSID called “private” that uses WPA2 security. When users connect to the “guest” SSID, they are automatically mapped to a guest VLAN, and when they connect to the “private” SSID, they are automatically mapped to another (secured) VLAN. With this method of mapping, users authenticated as guests receive access only to specific resources, while corporate employees can receive access to other (more sensitive) resources. This process is illustrated in Figure 9.11 below:
Figure 9.11 – WLAN VLAN Topology
| Note: Cisco’s wireless solutions portfolio includes Aironet APs (designed for enterprise usage) and Linksys APs (designed for small office/home office usage).
|