3com WX1200 3CRWX120695A Manuel D’Utilisation

C

HAPTER

 19: C

ONFIGURING

 

AND

 M

ANAGING

 S

ECURITY

 ACL

S

3 Commit the ACL to the configuration:

WX4400# commit security acl voip

SpectraLink’s Voice Interoperability for Enterprise Wireless (VIEW) 
Certification Program is designed to ensure interoperability and high 
performance between SVP phones and WLAN infrastructure products. 
This section describes how to configure WXs and MAPs for SVP phones.

3Com recommends that you plan for a maximum of 6 wireless phones per MAP.

To configure MSS for SVP phones, perform the following configuration tasks:

„

Install MAPs and configure them on the switch. (The examples in this 
section assume this is already done.)

„

Configure a service for the voice SSID. The service profile also specifies 
the encryption parameters to use for the SSID. This section shows 
configuration examples for WPA and for RSN (WPA2).

„

Configure a radio profile to manage the radios that will provide service 
for the voice SSID.

„

Configure a VLAN for the voice clients.

„

Configure a last-resort user in the local database.

„

Configure an authentication and accounting rule that allows clients of 
the voice SSID onto the network and places them in the voice VLAN.

„

Configure an ACL that marks ingress and egress traffic to and from 
the voice VLAN with CoS value 7. 

„

You cannot have WPA and WPA2 configured on handsets 
simultaneously within the same ESSID. SVP phones will not check-in.

„

You must disable IGMP snooping when running SpectraLink’s SRP 
protocol. SRP uses multicast packets to check-in which are not 
forwarded through the WX when IGMP snooping is enabled. When a 
tunneled VLAN is configured over a Layer 3 network, IGMP snooping 
must be disabled each time the tunnel is established, because the 
virtual VLAN is established with IGMP snooping turned on by default.