∙Disable Port Aggregation Protocol (PagP) − PagP is enabled by default, but it is not needed for user−facing ports.
∙Enable Port Fast Allows a switch to quickly resume forwarding traffic if a Spanning Tree Protocol (STP) link goes down.
∙Configure Wireless VLAN Creates a unique wireless VLAN that isolates wireless traffic from other data, voice, and management VLANs, thereby isolating traffic and ensuring greater control of traffic.
∙Enable QoS, and Do not Trust the Port (mark down to 0) Ensures appropriate treatment of high priority traffic, including soft phones, and prevents users from consuming excessive bandwidth by re−configuring their PCs.
Connecting APs to the Catalyst 3550 SMI or EMI
The following configuration is a reference template for use on Catalyst switch ports that are connected to Cisco APs. It provide the required configurations for security, QoS, and STP:
default interface <xx/yy> switchport mode access spanning−tree bpduguard [enable] spanning−tree bpdufilter [enable] no channel−protocol spanning−tree portfast
vlan [vlan id] mls qos
auto qos voip trust
mls qos map cos−dscp 0 10 18 26 34 46 48 56
mls qos aggregate−police AGG−POL−5M−DEFAULT 5000000 8000 exceed−action drop class−map match−any EGRESS−DSCP−0
match ip dscp 0
class−map match−any EGRESS−DSCP−10 match ip dscp 10
class−map match−any EGRESS−DSCP−56 match ip dscp 56
class−map match−any EGRESS−DSCP−26 match ip dscp 26
class−map match−any EGRESS−DSCP−18 match ip dscp 18
class−map match−any EGRESS−DSCP−48 match ip dscp 48
!
policy−map EGRESS−POLICING class EGRESS−DSCP−0
police aggregate AGG−POL−5M−DEFAULT class EGRESS−DSCP−10
police aggregate AGG−POL−5M−DEFAULT class EGRESS−DSCP−18
police aggregate AGG−POL−5M−DEFAULT class EGRESS−DSCP−34
police aggregate AGG−POL−5M−DEFAULT class EGRESS−DSCP−48
police aggregate AGG−POL−5M−DEFAULT class EGRESS−DSCP−56
police aggregate AGG−POL−5M−DEFAULT
!
interface [interface id]
description 11m Towards Wireless Access Point no ip address
mls qos monitor dscp 0 10 18 26 34 46 48 56 service−policy output EGRESS−POLICING
Cisco − Wireless IPT Design Guide for the Cisco 7920 IP Phone