206 Configuring WSS System ParametersNN47250-102 (320666-G Version 02.01)8 Click OK.Restricting Layer 3 Traffic Among Clients in a VLANTo restrict Layer 3 traffic among clients in the same VLAN, use an ACL. You can configure the ACL yourself or use theRestrict L3 Traffic option in WLAN Management Software.1 Access the VLAN table:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WSS.c Click the plus sign next to System.d Select VLANs.2 In the Content panel, select the VLAN.3 In the Task List panel, select Restrict L3 Traffic.4 Type the IP address of the VLAN’s default router (gateway).5 Click Next.The ACL WLAN Management Software will configure to block the traffic is displayed.6 Read the information on the wizard page about the ACL. If you need to modify the ACL, see “Viewingand Configuring ACLs” (page 208).7 Click Finish.Changing a VLAN’s Tunnel AffinityWSSs configured to comprise a Mobility Domain allow users to roam seamlessly across APs and across WSSs.Although a WSS that is not a member of a user’s VLAN cannot directly forward traffic for the user, the WSS can tunnelthe traffic through another WSS that is a member of the user’s VLAN.If an WSS that is not in the user’s VLAN has a choice of more than one other WSS through which to tunnel the user’straffic, the WSS selects the path based on the tunnel affinity value. This is a numeric value that each WSS within theMobility Domain advertises for each of its local VLANs to all other WSSs in the Mobility Domain. The WSS the user isroaming from selects the WSS with the highest affinity value for the user’s VLAN as the path for the user’s data. If twoor more WSSs have the same tunnel affinity value, the WSS the user is roaming from randomly selects a WSS.1 Access the VLAN table:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WSS.c Click the plus sign next to System.d Select VLANs.2 In the Tunnel Affinity box, specify the numeric value (1 to 10) that the WSS will advertise to other WSSsin the Mobility Domain for the VLAN. The default is 5.A higher tunnel affinity indicates a greater preference.3 Click Save.
