Assigning Traffic to Access Categories

WMM requires the SonicPoint N to implement multiple queues for multiple priority access categories. To differentiate traffic types, the SonicPoint N relies on either the application or the firewall to provide type of service (TOS) information in the IP data. Dell SonicWALL security appliances assign traffic to WMM Access Categories through two methods:

•	Specifying DSCP through firewall services and access rules (see Specifying Firewall Services and Access Rules )

•	Specifying a VLAN tag (see VLAN Tagging )

Specifying Firewall Services and Access Rules

Services using a certain port can be prioritized and put into a proper transmit queue. For example, UDP traffic sending to port 2427 can be regarded as a video stream. You add a custom service on the Firewall > Service Objects page.

At least one access rule should be added on the Firewall > Access Rules page for the new service. For example, when such a service happens from a station on the LAN zone to a wireless client on the LAN zone to a wireless client on the WLAN zone, an access rule can be configured in the General tab of the Add Rule window.

In the QoS tab of the Add Rule window, an explicit DSCP value is defined.

Later, when packets are sent to the SonicPoint N through the firewall using UDP protocol with destination port 2427, their TOS fields are set according to the QoS setting in the access rule.

VLAN Tagging

Prioritization is possible in VLAN over Virtual Access Point (VAP) because the SonicPoint N and ACs allow a VAP to be configured to connect with a VLAN by using same VLAN ID. You can set priority for VLAN traffic through a firewall access rule.

The firewall access rule is similar to that described in Specifying Firewall Services and Access Rules to set priority for a UDP service destined to a port such as 2427, but is configured with a VLAN (VLAN over VAP) interface, such as WLAN Subnets, as the Source and Destination is a WLAN-to-WLAN rule.