www.cooperbussmann.com/wirelessresources
Cooper Bussmann 945U-E Wireless Ethernet Modem & Device Server User Manual
67
Rev Version 2.14
Example 2: Multiple Wireless Interfaces
Another very desirable VLAN configuration for a wireless device is to support multiple virtual wireless networks.
For example, consider a corporate facility where separate networks may be provided for a) permanent staff, b)
guests, and c) production network. Each of the three virtual networks can be setup using different encryption keys
to enhance security. The setup is illustrated below.
Figure 65 VLAN Example 2
The module is configured with three wireless interfaces. The first one is the normal wireless interface found on
the Network page (wi0). The second (wi1) and third (wi2) are virtual interfaces created on the Repeaters page.
Each interface is configured as an access point and can be setup with unique SSIDs and encryption settings. In
this example, all three wireless interfaces are untagged so that devices joining each of the networks need not be
VLAN-aware.
Untagged data from each of the wireless interfaces is individually bridged with one of the three VLAN-aware virtual
interfaces “VLAN ID 10,” “VLAN ID 20,” and “VLAN ID 30” on the physical Ethernet interface which forms a VLAN
trunk. Untagged data transferred via the first wireless interface (wi0) is internally bridged with the virtual interface
VLAN ID 10. Likewise, untagged data transferred via the other two WDS repeater interfaces (wi1 and wi2) are
bridged respectively with VLAN ID 20 and VLAN ID 30. The unique VLAN tags are used for corresponding Ethernet
data, so that the Ethernet port becomes a VLAN trunk.
Because the 945U-E supports flexible VLAN functionality such that any of the available interfaces can have
membership to particular VLAN(s) by assigning membership to one or more VLAN groups—virtually any possible
topology can be achieved.
Figure 66 shows the configuration for the multi-VLAN example described above. Notice that there are four groups
configured, one for management and one for each of the VLAN IDs. The management group only has the untagged
Ethernet interface configured, which means only untagged device on the same IP subnet can access the modules
configuration.
