90 Configuring and Managing Ports and VLANs320657-A• VLAN-Name—This attribute is a Nortel vendor-specific attribute (VSA).Specify the VLAN name, not the VLAN number. The examples in this chapter assume the VLAN is assignedon a RADIUS server with either of the valid attributes. (For more information, see “Configuring AAA forNetwork Users,” on page 401.)VLAN NamesTo create a VLAN, you must assign a name to it. VLAN names must be globally unique across a MobilityDomain to ensure the intended user connectivity as determined through authentication and authorization.Every VLAN on a WSS has both a VLAN name, used for authorization purposes, and a VLAN number.VLAN numbers can vary uniquely for each WSS switch and are not related to 802.1Q tag values.You cannot use a number as the first character in a VLAN name.Roaming and VLANsWSS switches in a Mobility Domain contain a user’s traffic within the VLAN that the user is assigned to. Forexample, if you assign a user to VLAN red, the WSSs in the Mobility Domain contain the user’s traffic withinVLAN red configured on the switches.The WSS switch through which a user is authenticated is not required to be a member of the VLAN the user isassigned to. You are not required to configure the VLAN on all WSSs in the Mobility Domain. When a userroams to a switch that is not a member of the VLAN the user is assigned to, the switch can tunnel traffic for theuser through another switch that is a member of the VLAN. The traffic can be of any protocol type. (For moreinformation about Mobility Domains, see “Configuring and Managing Mobility Domain Roaming,” onpage 175.)Traffic ForwardingAn WSS switch switches traffic at Layer 2 among ports in the same VLAN. For example, suppose youconfigure ports 4 and 5 to belong to VLAN 2 and ports 6 and 7 to belong to VLAN 3. As a result, trafficbetween port 4 and port 5 is switched, but traffic between port 4 and port 6 is not switched and needs to berouted by an external router.Note. You cannot configure the Tunnel-Private-Group-ID attribute in the local userdatabase.Note. Because the default VLAN (VLAN 1) might not be in the same subnet on eachswitch, Nortel recommends that you do not rename the default VLAN or use it for usertraffic. Instead, configure other VLANs for user traffic.
