Access Points and VLANs

So we have different locations connect to a central office via MPLS. Each location is a different subnet. We have deployed about 12 Motorola 6521 access points to each of 8 locations. Right now they have static IPs in the same subnet as the location. What I need to do is protect our network from clients on the wireless. Please tell me if my thinking is correct.

I am planning on putting the access points on a different subnet than the LAN. I am thinking I would need to assign each switch port that the APs are connected to, to a VLAN, say VLAN 2. So 12 ports (the APs) are now on VLAN 2. Then set an IP on that VLAN, say 192.168.1.101. Then the APs follow that IP scheme. Now I can't get to them unless I put a route in the router at central saying "192.168.101.0 is at location1 (router1).

Am I on the right track?
cpeeleAsked:
Who is Participating?
 
rl3Connect With a Mentor Commented:
Question: are you using some type of controller to manage your APs?  

And yes, you appear to be on the right track for segmenting you WLAN traffic from your LAN traffic.  it is my understanding that if you don't have some type of controller for AP management, the APs should be in the same subnet as the network they are serving to the wireless clients.
0
 
cpeeleAuthor Commented:
Right now they are not managed but I learned today that the model of AP we use is capable of becoming a controller for up to 24 units so I was going to go that route.
0
 
rl3Commented:
... sounds like you plan to have one managing AP at each site?

I would suggest using a DHCP server for each site.  In so doing you can see who has what address at each site. Also, it will allow you to control how many IP addresses are available within each site(s) scope.
0
 
Craig BeckConnect With a Mentor Commented:
You would need to configure the switch ports as trunk (or tagged) ports if you want to implement multiple VLANs at the APs.

The native (or untagged) VLAN would be the VLAN that the AP itself is on, and the tagged VLAN(s) would be for client traffic.
0
All Courses

From novice to tech pro — start learning today.