D-Link DWS-1008 User Manual
1
To configure a VLAN and a last-resort user for the voice SSID:
DWS-1008#
set vlan 2 name v1 port 3
DWS-1008#
set igmp disable vlan v1
DWS-1008#
set authentication last-resort ssid phones local
DWS-1008#
set user last-resort-phones attr vlan-name v1
The set vlan and set igmp commands create VLAN v1 and add the uplink port to it, then disable IGMP
snooping in the VLAN.
The set authentication command in this example uses the local database to authenticate all users who
associate with the SSID phones. The set user command configures the user last-resort-phones in the
local database and assigns the user to VLAN v1. When a user associates with the SSID, MSS appends
the SSID name to the last-resort username, and searches for the last-resort-ssid name.
Configuring an ACL to Prioritize Voice Traffic
MSS does not provide priority forwarding for SVP traffic by default. To enable prioritization for SVP traffic,
you must configure an ACL and map it to the both the inbound and outbound directions of the VLAN to
which the voice clients are assigned. The ACL must contain an ACE that matches on IP protocol 119
and marks the IP ToS bits in matching packets with CoS value 7. When an AP receives a packet with
CoS value 7, the AP places the packet in the voice queue for priority forwarding.
If the VLAN will be shared by other clients, you also need to add an ACE that permits the traffic that is
not using IP protocol 119. Otherwise, the switch drops this traffic. Every ACL has an implicit ACE at the
end that denies all traffic that does not match any of the other ACEs in the ACL.
After you configure the ACE and map it to the VLAN, you must commit the VLAN to the configuration.
The ACL does not take effect until you map it and commit it.
The following commands configure an ACE to prioritize SVP traffic and map the ACE to the outbound
direction of the voice VLAN:
DWS-1008#
set security acl ip SVP permit cos 7 udp 10.2.4.69 255.255.255.255
gt 0 any gt 0
DWS-1008#
set security acl ip SVP permit cos 7 119 0.0.0.0 255.255.255.255
0.0.0.0 255.255.255.255
DWS-1008#
set security acl ip SVP permit 0.0.0.0 255.255.255.255
DWS-1008#
set security acl map SVP vlan v1 in
DWS-1008#
set security acl map SVP vlan v1 out
DWS-1008#
commit security acl SVP
The first ACE is needed only if the active-scan feature is enabled in the radio profile. The ACE ensures
that active-scan reduces its off-channel time in the presence of FTP traffic from the TFTP server,
by setting the CoS of the server traffic to 7. This ACE gives CoS 7 to UDP traffic from TFTP server
10.2.4.69 to any IP address, to or from any UDP port other than 0.
The second ACE sets CoS to 7 for all SVP traffic.
The third ACE matches on all traffic that does not match on either of the previous ACEs.
Summary of Contents for DWS-1008
Page 1: ......
