Integrate Aruba WCL 7010 with XG 230

hi,

which network is the controller on? Wrong answer - updated. You will need to configure one port on the controller for each vlan. For performance wise you might need two per vlan.

The controller needs to be on the same network as the APs.

Dani,

it depends who will NAT the traffic.

IF XG will handle layer 3 VLAN, you will see all IP from each VLAN and create the appropriate Firewall rules.

Please upload a network diagram.

Regards

Greetings,

Thank you for your reply. Please, check the basic drawing:

Dani,

Create a trunk on the port coming from l3 switch to XG and make sure XG knows all vlan on that port.

Then use firewall rule to filter the traffic. XG should act as router on a stick.

Regards

The routing for VLANs in done on L3 switches. My XG is acting as a gateway for the internet only.

I can still make it the way I explained on my 1st post. But in this case, I won't be able to monitor traffic, only I will be able to control it.

If the inter-vlan is managed by switch, traffic does not even hit XG.

Regards

Which mean I need to add users as client less users, apply rules and monitor them?!

No.

On XG side you see the different Source ip unless layer 3 is natting the traffic.

You cannot however rule traffic between vlan.