Industrial wireless

A plant wireless design with separate SSIDs and VLANs (PLANT-OPS 110 and PLANT-AGV 120 on WPA2/3-Enterprise 802.1X EAP-TLS, PLANT-GUEST 130 on a restricted internet-only path), access points trunked to a Layer 3 switch stack, a wireless LAN controller and RADIUS server behind an industrial firewall, and guest traffic denied to OT and management networks.