D-Link DWS-4026 User Manual page 429

Software User Manual
12/10/09
Field
Client QoS
Client QoS Bandwidth
Limit Down
Client QoS Bandwidth
Limit Up
Client QoS Access
Control Down
Client QoS Access
Control Up
Document 34CSFP6XXUWS-SWUM100-D7
Table 263: Wireless Network Configuration (Cont.)
Description
The Client QoS parameters allow the switch to apply access control lists (ACLs) and
differentiated service (DiffServ) policies to wireless clients associated to the AP and extend
the switch QoS features into the wireless domain.
Select this option to enable Client QoS operation for wireless clients that associate with the
AP using the SSID in the previous field.
Client QoS provides control over certain QoS aspects of wireless clients that connect to the
network, such as the amount of bandwidth and type of traffic an individual client is allowed to
send and receive. To control general categories of traffic, such as HTTP traffic or traffic from
a specific subnet, you can configure ACLs and assign them to one or more VAPs. Client QoS
also allows you to configure per-client conditioning of various micro-flows through DiffServ.
ACLs are a collection of permit and deny conditions, called rules, that provide security by
blocking unauthorized users and allowing authorized users to access specific resources.
ACLs can block any unwarranted attempts to reach network resources.
Each ACL is a set of up to ten rules applied to traffic sent from a wireless client or to be
received by a wireless client. Each rule specifies whether the contents of a given field should
be used to permit or deny the packet from being transmitted. Rules can be based on various
criteria and may apply to one ore more fields within a packet, such as the source or destination
IP address, the source or destination L4 port, or the protocol carried in the packet.
DiffServ policies are a useful tool for establishing general micro-flow definition and treatment
characteristics that can be applied to each wireless client, both inbound and outbound, when
it is authenticated on the network. Packets are classified and processed based on defined
criteria. The classification criteria is defined by a class. The processing is defined by a policy's
attributes.
Enter the maximum allowed transmission rate from the AP to the wireless client in bits per
second. The valid range is 0-4294967295 bps.
A non-zero configured value is rounded down to the nearest 64 Kbps value for use in the AP,
but to no less than 64 Kbps. A value of 0 means that the bandwidth maximum limit is not
enforced in this direction.
Enter the maximum allowed client transmission rate to the AP in bits per second. The valid
range is 0-4294967295 bps.
A non-zero configured value is rounded down to the nearest 64 Kbps value for use in the AP,
but to no less than 64 Kbps. A value of 0 means that the bandwidth maximum limit is not
enforced in this direction.
Select the name of the access list applied to traffic in the outbound (down) direction.
Only existing IP access lists are listed in the menu and are prefixed with the access list type.
To create an IP access list, use the pages in the LAN > Access Control Lists folder.
• On the IP ACL Configuration page, create a new standard, extended, or named IP ACL.
• On the IP ACL Rule Configuration page, create one or more rules to define the packet
match criteria and the deny or permit action for each rule.
After switching the packet to the outbound interface, the ACL rules are checked for a match.
The packet is transmitted if it is permitted, and discarded if it is denied.
Select the name of the access list applied to traffic in the inbound (up) direction.
Only existing IP access lists are listed in the menu and are prefixed with the access list type.
To create an IP access list, use the pages in the LAN > Access Control Lists folder.
• On the IP ACL Configuration page, create a new standard, extended, or named IP ACL.
• On the IP ACL Rule Configuration page, create one or more rules to define the packet
match criteria and the deny or permit action for each rule.
When a packet is received by the AP, the ACL rules are checked for a match. The packet is
processed if it is permitted, and discarded if it is denied.
D-Link Unified Access System
Basic Setup Page 429