188 CHAPTER 5: C ONFIGURING WX S YSTEM AND ADMINISTRATIVE P ARAMETERSIf the correct software image is already loaded on the WX, go to step 13.Otherwise, select a software image from the list, and click Close.This dialog box lists the images that are in the image repository. You mustadd a system image to the repository for the image to appear in this list.(To add an image to the repository, see “Managing WX System Files” onpage 369.)To select a different image, click Reset to clear the image selected.13 Click another item in the organizer list, select another page in the wizard,or click Finish to save the changes and close the wizard.Configuring VLANs A virtual LAN (VLAN) is a Layer 2 broadcast domain that can span multiplewired or wireless LAN segments. Each VLAN is a separate logical network,and, if you configure IP interfaces on the VLANs, MSS treats each VLANas a separate IP subnet.You configure VLANs on a WX switch’s network ports by configuringthem on the WX switch itself. You configure a VLAN by assigning a nameand network ports to the VLAN. Optionally, you can assign VLAN tagvalues on individual network ports. You can configure multiple VLANs ona WX switch’s network port. Optionally, each VLAN can have an IPaddress.You do not need to configure VLANs on MAP access ports or wiredauthentication ports, because the VLAN membership of these types ofports is determined dynamically through the authentication andauthorization process. Users who require authentication connect throughWX ports that are configured for MAP access points or wiredauthentication access. Users are assigned to VLANs automatically throughauthentication and authorization mechanisms such as 802.1X.By default, none of a WX switch’s ports are in VLANs. A WX switchcannot forward traffic on the network until you configure VLANs and addnetwork ports to those VLANs.VLANs, IP Subnets,and IP AddressingGenerally, VLANs are equivalent to IP subnets. If a WX is connected to thenetwork by only one IP subnet, the WX must have at least one VLANconfigured. Optionally, each VLAN can have its own IP address. However,no two IP addresses on the WX switch can belong to the same IP subnet.
