Dynamic VLAN operation

Jouni Malinen jkmaline at cc.hut.fi
Thu Oct 12 00:28:23 EDT 2006


On Thu, Oct 12, 2006 at 05:16:58PM +1300, Matt Brown wrote:

> What I'm wanting to do is have each client that is associated with the
> access point presented to userspace on an individual VLAN. I don't want
> the clients themselves to have to deal with 802.1q packets, the wireless
> driver should take care of any necessary "tagging", or "untagging".

Why would you like to have each client in its own individual VLAN? Do
you need to block each client from seeing broadcast frames from other
clients? Would each VLAN interface still be bridged into a same bridge
interface?

> Is this the right sort of problem to be trying to solve with the dynamic
> vlan functionality, or have I misunderstood it's intended use?

Dynamic VLANs would be more likely used to assign user groups into
different VLANs (e.g., marketing and engineering into different VLANs).
Of course, this could be extended to just one user per group, but I
would expect there to be better solutions to whatever the problem that
is being solved here.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the HostAP mailing list