SonicPoints with Procurve Switches

SonicWall firewalls can act as wireless LAN controllers for SonicPoint Access Points. The limitation is that the controller must be on the same layer 2 broadcast domain as the access points. This is actually fairly easy to work around if you have HP Procurve managed switches to work with.

In this example the SonicWall and core 2910AL switch are on the first floor and the access points are connected to a 2910Al on the fourth floor. The switches are connected by fiber using LACP aggregation or trunks in HP terms.

The key is that the WLAN management VLAN is untagged on ports that the SonicWall and SonicPoints are connected to so that the access points can find the SonicWall during boot up. The management vLAN is Tagged on the trunk ports.

The actual WLAN vLANs are Tagged on each port that the SonicWall and access points are connected to and on the trunk ports.

SonicWall Configuration
X5 WLAN
X5:v140 ZONE WLAN-Corp
X5:v150 ZONE WLAN-Guest

Zones
WLAN-CORP
WLAN-Guest

Firewall Access Rules
WLAN-Corp -> LAN allow any any
WLAN-Guest -> LAN Deny any any

Virtual Access Point profiles
Corporate
Guest

Virtual Access Points
SSID
Private - VLAN 140
Guest-Access - VLAN 150

Virtual Access Point Groups
WiFi
 Corporate
 Guest

Core Switch configuration - Procurve 2910AL
interface 18
   name "SW X5 WLAN"
interface 23
   name "Trunk3-4th-Floor"
exit
interface 24
   name "Trunk3-4th-Floor"
trunk 23-24 Trk3 LACP
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-11,14-16,20,Trk1-Trk3
   no untagged 12-13,18
   no ip address
   exit
vlan 200
   name "WLAN-MGT"
   untagged 18
   tagged Trk3
   no ip address
   exit
vlan 150
   name "WLAN-Guest"
   tagged 18,Trk3
   no ip address
   exit
vlan 140
   name "WLAN-Corp"
   tagged 18,Trk3
   no ip address
   exit

4th Floor Switch Configuration
Interface 4
  name "SonicPoint ConfRM2"
Interface 18
  name "SonicPoint ConfRM1"
trunk 47-48 Trk1 LACP
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-3,5-17,19-46,Trk1
   ip address 10.1.1.252 255.255.255.0
   no untagged 4,18
   exit
vlan 140
   name "WLAN_CORP"
   tagged 4,18,Trk1
   no ip address
   exit
vlan 150
   name "WLAN_GUEST"
   tagged 4,18,Trk1
   no ip address
   exit
vlan 200
   name "WLAN_MGT"
   untagged 4,18
   tagged Trk1
   no ip address