Versions Compared

Old Version 2

changes.mady.by.user David Klein

Saved on

compared with

New Version Current

changes.mady.by.user Eric Ronhovde

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Description:

...

Tip
iconfalse

One of the ways to ensure that you have the clearest and best connection for your Sonicwall is to utilize bandwidth management (BWM).  Now, this is a bit tricky as Sonicwall allocates bandwidth based on your AVAILABLE bandwidth.  So, what this means is you could spend time setting up the connection, but not properly setting your total connection would cause it to fail. 

This article will show you how to do the following:

  • Setup QOS/BWM settings on a Sonicwall device
Note
iconfalse

Example:

Your connection is 30Mbps, and you set your Sonicwall to allocate 10% of this, so 27Mbps can be used for Data (3Mbps would be saved for VoIP).  If your connection was actually only a 20Mbps connection, the Sonicwall would use all 20Mbps for Data, thinking more was available.  This would essentially render all of the work you did useless!

**Important** - Sonicwall does NOT work the same way with QoS as you may be used to.  The QoS settings on Sonicwall are essentially there to "tag" packets or allow the tags to be there, but it does NOT actually do anything to prioritize these packets without setting up the Bandwidth Management (BWM) as below.

To properly configure the Sonicwall, we will adjust settings in 3 areas after first ensuring that the firmware is up to date. (Here is a helpful video also: https://www.youtube.com/watch?v=yUbLf9qJU98)

Step By Step:

...

Info
icon

...

false
Info
iconfalse
Expand

...

titleFirmware Settings
  1. Verify and update the firmware.

...

    • greater  (The device does need to be registered, but it does NOT require a paid subscription to download the firmware.

...

  • VoIP Settings - SHOULD ALL BE OFF:
    • Enable Consistent NAT is DISABLED
    • SIP Transformations is the same thing as SIP ALG and should be DISABLED

 Image Removed

  • Firewall Rules - THE MOST IMPORTANT PART!!
    • We need to create a specific rule allowing ANY traffic to go from the internal LAN to the WAN (public internet). 
    • First step is to create an Address Object that will contain the IP address of the server.  First make sure you have this (Usually just ping the host they are on, ie ping pbx.persephone.io will return 54.183.173.52)
    • Once you have this, go to the Firewall tab, and select Address Objects
    • **Scroll all the way down past the groups, and select "Add Address Object" - NOT an address group
      Image Removed
    • Add the settings as below (using the IP address you now have from the step above)
      Image Removed
      • Now to add the rule, Go to the Firewall tab, and select the "Matrix View"
      • Select the from LAN to WAN button as below:

Image Removed

  • From the next screen, select add rule and then configure as shown below.  Make sure that all settings match exactly - MAKE SURE TO FOLLOW THE NEXT STEP ALSO BEFORE SAVING:

Image Removed

  • **IMPORTANT
    • Now go to the advanced tab, and change the UDP Connection activity timeout to 3600 seconds:
    • Image Removed
    • Save all changes

 

...

    • )
Info
iconfalse
Expand
titleVoIP Settings
  1. Select VoIP from the left.
  2. Click on Settings.
    1. Ensure that Enable consistent NAT is ENABLED.
      1. (Some firmware versions will need this DISABLED, but it is best to start with Enabled and test from there.)
    2. Ensure that Enable SIP Transformations is DISABLED.
    3. Click Apply to save changes.
    Image Added
Info
iconfalse
Expand
titleFirewall Rules & Objects
  1. On the left, click Firewall > Access Rules > Matrix.
    1. Select the LAN to LAN arrow and disable or delete any VoIP or Voice rules under Destination or Service.
    2. Select the LAN to WAN arrow and disable or delete any VoIP or Voice rules under Destination or Service.
    3. Select the WAN to LAN arrow and disable or delete any VoIP or Voice rules under Destination or Service.
    4. Select the LAN to WAN arrow and disable or delete any VoIP or Voice rules under Destination or Service.
  2. Next, click Network on the left, and then click Address Objects (May be Under Firewall for Certain Firmware Revisions)
  3. Click Add and do the following.
    1. Name: Audian VoIP Server 1, 2, 3, 4, 5, and so on.
      • Zone Assignment: WAN
      • Type: Host
      • Network: Every IP Below needs to be added as an address object
    Note

    Please contact Audian support for a list of our IP addresses to whitelist.


    Image Added

  4. Click the Address Group tab at the top
    1. Click Add Group and add Audian
    2. Add all of the Audian objects and then click OK.
      Image Added
  5. Navigate to Firewall > Access Rules > Click Add
    1. Set the Following
      • Action: Allow
      • From Zone: LAN
      • To Zone: WAN
      • Service: Any
      • Source: Any
      • Destinations: Audian
      • Allow Fragmented Packets: Checked
      Image Added
    2. Click Advanced tab and set the following.
      • UDP Connection Inactivity Timeout (seconds): 360
  6. Navigate to Firewall > Access Rules > Click Add
    1. Set the Following
      • Action: Allow
      • From Zone: WAN
      • To Zone: LAN
      • Service: Any
      • Source: Audian
      • Destinations: Any
      • Allow Fragmented Packets: Checked
    2. Click Advanced tab and set the following.
      • UDP Connection Inactivity Timeout (seconds): 360
  7. Save all changes
    • **It may take several minutes (up to 60) for the phones to properly re-register.  You can reboot all phones if you would like to make this happen quicker.

...

    •  
Info
iconfalse

...

Process 2 (optional)

Related Articles:

...

Expand
titleBandwidth Management Settings
  1. On the left, navigate to Network > Interfaces.
  2. Click the Configure button under WAN.
  3. Select the Advanced tab, and then enable both Egress and Ingress Bandwidth Management. 
  4. Set your speed in Kbps in both of the boxes.
    1. Ingress= Download Speed (this should be set to your download speed in Kbps (x Mbps * 1024)Egress = Upload Speed (this should be set to your upload speed in Kbps (x Mbps * 1024
  5. Hit OK to save changes.
  6. Next, navigate to the Firewall Settings Menu, and then to BWM
  7. Ensure that Bandwidth Management Type is set to "Global"
  8. Ensure that at a minimum one priority above Medium (the default) is selected.  In this case, we have selected "High"
  9. Set this to a guaranteed reserve of between 20-30%.  (Make sure the guaranteed numbers add up to 100% as well)
    1. OPTIONAL - An Audian technician can give more details on the percentage number if needed, but essentially each voice channel uses around 50Kbps, so if you expect a maximum of 5 simultaneous voice calls, you would want to "guarantee" around 50Kbps * 5 = 250Kbps of bandwidth.  In our example, the maximum upload is 5,120Kbps, so we would want to set aside 250/5,120 = 6% of the available connection as guaranteed. In most cases, 10% is a good number to use.  Also keep in mind that this just GUARANTEES that much connection.  If no voice traffic is being used, the full connection will be used for your data and other connections.
    Image Added
  10. Hit Accept to save your changes.
  11. Navigate to Firewall, Access Rules, and then to the LAN -> WAN rule that was created to allow VoIP traffic previously (in the Sonicwall Guide).
  12. Select the configure button
    Image Added
  13. Select the "Ethernet BWM" tab
  14. Check to enable both Inbound and Outbound Bandwidth Management
  15. Select the Priority that you set in the previous Firewall settings (in this example, "2 High")
    Image Added
  16. Select OK to save

You have now configured your sonicwall to automatically give a higher priority to any traffic that is going to the Audian servers, and to allow a percentage of your connection to be "guaranteed" for that traffic.  This should eliminate any call quality issues with high usage clients.