Open as PDF
404 CHAPTER 19: CONFIGURING AND MANAGING SECURITY ACLS
3 Commit the ACL to the configuration:
WX4400# commit security acl voip
SpectraLink’s Voice Interoperability for Enterprise Wireless (VIEW)
Certification Program is designed to ensure interoperability and high
performance between SVP phones and WLAN infrastructure products.
This section describes how to configure WXs and MAPs for SVP phones.
3Com recommends that you plan for a maximum of 6 wireless phones per MAP.
To configure MSS for SVP phones, perform the following configuration tasks:
Install MAPs and configure them on the switch. (The examples in this
section assume this is already done.)
Configure a service for the voice SSID. The service profile also specifies
the encryption parameters to use for the SSID. This section shows
configuration examples for WPA and for RSN (WPA2).
Configure a radio profile to manage the radios that will provide service
for the voice SSID.
Configure a VLAN for the voice clients.
Configure a last-resort user in the local database.
Configure an authentication and accounting rule that allows clients of
the voice SSID onto the network and places them in the voice VLAN.
Configure an ACL that marks ingress and egress traffic to and from
the voice VLAN with CoS value 7.
You cannot have WPA and WPA2 configured on handsets
simultaneously within the same ESSID. SVP phones will not check-in.
You must disable IGMP snooping when running SpectraLink’s SRP
protocol. SRP uses multicast packets to check-in which are not
forwarded through the WX when IGMP snooping is enabled. When a
tunneled VLAN is configured over a Layer 3 network, IGMP snooping
must be disabled each time the tunnel is established, because the
virtual VLAN is established with IGMP snooping turned on by default.