Hello Bobby,
The question of which config to use, depends on whether you want to use Local
Switching (drop client packets at the AP switch port, right onto the network there),
or Tunnel your client WLANs back to the ZoneDirector. In any case, because your
VLAN 401 is the "management VLAN", you need to include VLAN 401 to the ZD
and APs. Then the question about local switching or turnneled, will decide where
you also need the 199 and 411 VLANs.
In Config 1, the ZD can live on an Access VLAN 401 switch port. With no other
switch config, the traffic would be tagged with the VLAN ID, so you would set the
Access VLAN = 401 under Configure/System parameters. You would have to be
on a tagged Access VLAN 401 switch port to talk to the ZD though.
If you included a statement "switchport native vlan 401" on the ZD's switch port,
that means VLAN 401 traffic will be untagged, and you would match with VLAN = 1
under your Configure/System ZD page. This is most recommended.
Similarly on the Configure/Access Points page, Access Point Policies section,
Management VLAN would be set to VLAN ID = 401 if the switch port configuration
does not include a "switchport native VLAN 401" statement. Otherwise if it did say
so, you could leave the VLAN ID field blank, with 'Keep APs setting' checked.
That takes care of VLAN 401, now for VLAN 119 and 411, which I assume are
for client WLANs, your Config 1 AP switch ports gi0/2 and gi0/3 should both look
like gi0/1, with VLANs 401,199,411 all trunked to the AP, and your WLANs need
to be configured to use Local Switching.
Or alternately, if you use WLAN Advanced Options, and specify that your client
traffic gets tunneled back to the ZD, you only need to trunk VLANs 199/411 to the
ZD. If say, you want to tunnel one client WLAN traffic back to the ZD (advised for
VoIP), and let the other VLAN be switched at the AP, you would put those VLANs
on the ZD and AP switch ports, respectively.
Let me provide the example configs, with untagged VLAN 401, and tagged
client VLANs 199, 411, for switch to switch trunk ports, and your ZD/AP ports.
-------------------------------------------
Example 1: Client local switching
gi0/1: switchport mode trunk
description TRUNK to_SWITCH_B
switchport trunk allowed vlan 401,411,199 along with other non ruckus vlan
gi0/2: switchport mode access
description RUCKUS_ZD
switchport access vlan 401
switchport native vlan 401
switch_B:
gi0/1 switchport mode trunk
description TRUNK from_Switch_A
switchport trunk allowed vlan 401,411,199
gi0/2 switchport mode trunk
description RUCKUS_AP1
switchport trunk allowed vlan 401,411,199
switchport native vlan 401
gi0/3 switchport mode trunk
description RUCKUS_AP2
switchport trunk allowed vlan 401,411,199
switchport native vlan 401
--------------------------------------------
Example 2: All Client traffic tunneled to ZD
gi0/1: switchport mode trunk
description TRUNK to_SWITCH_B
switchport trunk allowed vlan 401,411,199 along with other non ruckus vlan
gi0/2: switchport mode trunk
description RUCKUS_ZD
switchport trunk allowed vlan 401,411,199
switchport native vlan 401
switch_B:
gi0/1 switchport mode trunk
description TRUNK from_Switch_A
switchport trunk allowed vlan 401,411,199
gi0/2 switchport mode access
description RUCKUS_AP1
switchport access vlan 401
switchport native vlan 401
gi0/3 switchport mode access
description RUCKUS_AP2
switchport access vlan 401
switchport native vlan 401
--------------------------------------------
Example 3: VLAN 199 client traffic tunneled to ZD
gi0/1: switchport mode trunk
description TRUNK to_SWITCH_B
switchport trunk allowed vlan 401,411,199 along with other non ruckus vlan
gi0/2: switchport mode trunk
description RUCKUS_ZD
switchport trunk allowed vlan 401,199
switchport native vlan 401
switch_B:
gi0/1 switchport mode trunk
description TRUNK from_Switch_A
switchport trunk allowed vlan 401,411,199
gi0/2 switchport mode trunk
description RUCKUS_AP1
switchport trunk allowed vlan 401,411
switchport native vlan 401
gi0/3 switchport mode trunk
description RUCKUS_AP2
switchport trunk allowed vlan 401,411
switchport native vlan 401