Configure Qos To Secure The Wlan - Cisco Catalyst 3850 Manual

Converged Wired and Wireless Access
By default, the broadcast SSID is enabled, and the WLAN/SSID information is sent in the beacons. The
Note
no broadcast-ssid command can be used to hide the SSID from being broadcast or made visible to end
clients. When the SSID broadcast is disabled, the end-users will still be able to connect to the SSID by
explicitly entering the SSID information manually in the wireless client network properties.

Configure QoS to Secure the WLAN

Configure a service policy on the ingress direction to properly classify traffic.
Step 2
All ingress traffic is classified the same as wired traffic. On egress, the secure WLAN is given the
majority of the available bandwidth.
QoS configuration for a secure WLAN assumes that there is another WLAN with lower priority, such as
a guest or open WLAN. The end users on a secure WLAN should not be impacted by non-critical traffic
on other WLANs.
All WLANs share the default port_child_policy egress service policy. This policy is configured by
default and does not need to be explicitly configured on a WLAN.
wlan
shutdown
service-policy client input
service-policy output
no shutdown
exit
secure_WLAN 2 CISCO_WLAN
wlan-Entr-SSID-Output-policy
Best Practice User Guide for the Catalyst 3850 and Catalyst 3650 Switch Series
wlan-Entr-Client-Input-Policy
Provisioning a Small Branch WLAN
91