512 Configuring and managing security ACLs
NN47250-500 (Version 03.01)

Configuring a service profile for WPA

To configure a service profile for SVP phones that use WPA:
Create the service profile and add the voice SSID to it.
Enable the WPA information element (IE). This also enables TKIP. Leave TKIP enabled.
Disable 802.1X authentication and enable preshared key (PSK) authentication instead.
•Enter the PSK key.
The following commands configure a service profile called vowlan-wpa2 for RSN:
WSS# set service-profile vowlan-wpa ssid-name phones
WSS# set service-profile vowlan-wpa wpa-ie enable
WSS# set service-profile vowlan-wpa auth-dot1x disable
WSS# set service-profile vowlan-wpa auth-psk enable
WSS# set service-profile vowlan-wpa psk-raw
c25d3fe4483e867d1df96eaacdf8b02451fa0836162e758100f5f6b87965e59d

Configuring a radio profile

WSS Software has a default radio profile, which manages all radios by default. Some of the radio parameters require
changes for voice traffic. You can modify the default radio profile or create a new one.
To create or modify a radio profile for voice clients:
Map the service profile you created for the voice SSID to the radio profile.
Change the delivery traffic indication map (DTIM) interval to 3.
Change the QoS mode to SVP. (This also disables WMM.)
Configure APs, if not already configured.
Map radios to the radio profile and enable them.
The following commands modify the default radio profile for SVP phones:
WSS# set radio-profile default service-profile vowlan-wpa2
WSS# set radio-pr ofile defa ult dt im-interval 3
WSS# set radio-pr ofile default qos-m od e svp
The AP radios are already in the default radio profile by default, so they do not need to be explicitly added to the profile.
However, if you create a new radio profile for voice clients, you will need to disable the radios, map them to the new
radio profile, then reenable them.
Note. Some radio settings that are beneficial for voice traffic might not be beneficial for
other wireless clients. If you plan to support other wireless clients in addition to voice
clients, Nortel recommends that you create a new radio profile specifically for voice clients,
or use the default radio profile only for voice clients and create a new profile for other
clients. The examples in this section modify the default radio profile for voice clients.