vlans allowed on trunk

[suthomas1]

Hi,

We have a wireless controller that is connected to a switch port.

The wireless vlan for the ssid is vlan 101.

The switch port has native vlan put for this wlc.i want to know what vlan should we specifically allow on the switch trunk to wireless controller?

Is it only the wireless vlan or should it be also some data vlans.

Thanks in advance.

[Leo Laohoo]

The switch port has native vlan put for this wlc.i want to know what vlan should we specifically allow on the switch trunk to wireless controller?

Allow the Management VLAN, AP Manager VLAN (if applicable) and the associated VLANs for the Dynamic Interfaces.

[suthomas1]

Thanks. So the vlans to be allowed will be vlan 101 (dynamic interface) , Vlan 5 ( management vlan).

If i understand correctly , there is no need to allow seperate non-wireless vlans that wireless users on this controller will be accessing.

Please comment if this is not correct.

[Leo Laohoo]

If i understand correctly , there is no need to allow seperate non-wireless vlans that wireless users on this controller will be accessing.

For security purposes, you only allow VALID VLANs.  This is more so with wired VLAN.