This guide will demonstrate how to prioritize VoIP packets on a Sonicwall router for SkySwitch. It is based on an 10x10 Internet connection with 10 concurrent calls using the G.711 codec (ie. approximately 90 Kbps downstream / upstream per call). Please adjust these variable as needed for your setup.

Please be aware we do not provide Configuration Support for these devices. This documentation is available to assist with basic functionality, but all Support related questions should be directed to the manufacturer for these devices. 

Accessing The Firewall’s Interface

1. Enter the firewall's IP address in the address bar of your web browser.

NOTE: To learn how to check your firewall's IP address, refer to your firewall's documentation or contact manufacturer for support.

2. Enter your firewall's username and password.

VoIP Settings

1. Go to VoIP > Settings.

2. Check Enable Consistent NAT, uncheck/disable everything else.

3. Click Accept to save the settings.

Firewall Settings

1. Go to Firewall Settings > BWM.

2. Under Bandwidth Management Type, select Global.

3. Under Priority, disable EVERY category, except Medium.

Set values to:

Guaranteed: 50%
Burst: 90% Enable Realtime and set values to:
   Guaranteed: 50%
   Burst: 100%

4. Click OK to save the settings.

Firewall

1. Go to Firewall > Service Objects > Services

NOTE: There may be a need to scroll down, as there are two categories, Service Group and Services.

2. Click Add

> Bandwidth Management (at bottom)... • Check Enable Egress; set interface egress bandwidth to 10000.000000 (type in the upload speed in Kbps from your ISP) • Check Enable Ingress; set interface ingress bandwidth to 10000.000000 (type in the download speed in Kbps from your ISP).

3. Click OK to save the settings

4. Go to Address Objects

NOTE: There may be a need to scroll down, as there are two categories, Address Objects and Address Groups.

5. Click Add:

Name : DAL_network
Zone Assignment : WAN
Type : Network
Network: 75.98.50.46
Netmask: 255.255.255.0


Name : NYC_network
Zone Assignment : WAN
Type : Network
Network: 70.42.44.15
Netmask: 255.255.255.0

Name: LAS_network
Zone Assignmen : WAN
Type : Network
Network: 216.24.144.15
Netmask: 255.255.255.0

6. Click Add to save and then click Close.

7. Go to Address Groups.

8. Click Add Group. Name : SKY_networks group

9. Select DAL_network and NYC_network to add address object to group.

10. Click OK to save.

Access Rules

1. Go to Firewall > Access Rules.

2. Click Add to add the rule for LAN > WAN

> in the General tab

Action : Allow
Service: Create New Service Group
  Name : service_ports
  Add the following port range to this group: service_ports
Source : Any Destination : SKY_networks group
Users Allowed : ALL
Schedule : Always on

> in the QoS tab

DSCP Marking Action : Explicit
Explicit DSCP Value : 46 - Expedited Forwarding (EF) > in the Ethernet BWM tab Enable both Inbound and Outbound Bandwidth Management; set both to 0 Realtime

3. Click Add to save and then click on Close

4. Click Add to add rule for WAN > LAN

> in 'General' Tab

Action :Allow
Service : service_ports
Source : networks group
Destination : Any
Users Allowed : ALL
Schedule : Always on

> in QoS tab

DSCP Marking Action : Explicit
Explicit DSCP Value : 46 - Expedited Forwarding (EF)

> in the Ethernet BWM tab

Enable both Inbound and Outbound Bandwidth Management; set both to 0 Realtime

5. Click Add to save and then click Close.