User`s manual

252
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring and Managing Security ACLs
DWS-1008# commit security acl voip
4. Map the ACL to the outbound trafc direction of VLAN corp_vlan:
DWS-1008# set security acl map voip vlan corp_vlan out
Enabling SVP Optimization for SpectraLink Phones
You can congure MSS to prioritize voice trafc for VoIP phones that use SpectraLink Voice
Priority (SVP). If you disable WMM support and enable SVP support, MSS ensures voice
quality for SpectraLink phones using SVP by allocating CoS queues 6 and 7 on the MAP
for distinct SVP treatment as well as forwarding all trafc from that queue before forwarding
trafc from other queues.
You can enable SVP optimization on a VLAN, port group, port list, virtual port list, Distributed
AP, or user glob. To enable SVP optimization, disable WMM support on the radio prole that
serves the SVP users, congure an ACL that assigns trafc for IP protocol 119 to CoS queue
6 or 7, and map the ACL to the outbound trafc direction.
For example, to enable SVP support for all users in VLAN corp_vlan, perform the following
steps:
1. Disable WMM support on the radio prole that will serve SVP users, to enable SVP
optimization on AP forwarding queues 6 and 7 for radios managed by that radio
prole:
DWS-1008# set radio-prole radprofsvp wmm disable
2. Congure an ACE in ACL svp that assigns IP protocol 119 trafc for all source and
destination addresses to CoS queue 7:
DWS-1008# set security acl ip svp permit cos 7 119 0.0.0.0 255.255.255.255
0.0.0.0 255.255.255.255
3. Congure another ACE to change the default action of the ACL from deny to permit.
Otherwise, the ACL permits only voice trafc that matches the previous ACE and
denies all other trafc.
DWS-1008# set security acl ip svp permit 0.0.0.0 255.255.255.255
4. Commit the ACL to the conguration:
DWS-1008# commit security acl svp
5. Map the ACL to the outbound trafc direction of VLAN corp_vlan:
DWS-1008# set security acl map voip vlan corp_vlan out