Take the 2-minute tour ×

We have recently opened a branch office for developers to work out of. The guys there all have Aastra VoIP 'hard' phones on their desks.

The main office and branch offices are linked together via a VPN (using two Sonicwall Firewalls) the VoIP PBX we have is a Trixbox installation, interfacing to 4 PSTN lines.

Most of the time this setup works great, but if someone opens a file on a server at the 'other' end of the link the call quality drops off.

Is there some easy (and cheap) way we can make the VoIP traffic a higher priority?

share|improve this question
add comment

4 Answers

up vote 1 down vote accepted

SonicWall devices have QoS configuration options in the Enhanced OS version. We use this internally to prioritize VoIP and Citrix traffic on our VPN tunnels. I would think this would be your best option since it utilizes existing hardware.

share|improve this answer
Sadly I've only got the Standard Version of Sonic OS at both ends, but will look into getting them upgraded –  Simon Hodgson Jun 2 '09 at 8:17
I am using sonicwall at all my sites from TZ170 to Pro 3060. Excellent devices when it comes to bandwidth management and QOS. Just make sure when you are creating your firewall rules, you have the correct group of objects which should be trottled. –  Saif Khan Jun 3 '09 at 22:24
add comment
  1. Install ubuntu 9.04 server and two network interface cards on a surplus PC (mine is 800MHZ P3).

  2. Set up a firewall as described here: http://ubuntuforums.org/showthread.php?t=926001

  3. Install wondershaper: "apt-get install wondershaper". I used the improved version of wondershaper from here: http://serendipity.ruwenzori.net/index.php/2008/06/01/modified-wondershaper-for-better-voip-qos.

You need to do some measurements on your system, so that you can give upload and download values to wondershaper when you start it (see /usr/share/doc/wondershaper/README.Debian).

I can get good quality VOIP calls while filling my DSL line with a torrent download.

share|improve this answer
add comment

Unless you are dealing with a point-to-point circuit or MPLS connection between your branch offices, simply adding QoS to your SonicWall or other VPN/Firewall device won't be enough. If your SonicWall's are using public internet connections, they will have no control over the inbound data received for the WAN and outbound QoS will be stripped off once it hits your ISP's router.

In fact, added any QoS policies to inbound traffic can cause more network conjestion. Consider a SMB packet which has traversed your bandwidth limited download link and reaches the SonicWall. The SonicWall sees that this is Windows file sharing, which is low priority, and drops or delays the packet due to higher priority VoIP that is also being received. Well, the sending client gets the TCP retransmission and has to send that SMB packet again which increases the overall bandwidth usage on your link than if the packet had been allowed in the first place.

I guess my suggestion to increase VoIP quality is:

  1. Utilize MPLS to connect to your branch offices which will honor your QoS policies.
  2. When using the public Internet for VPN's, use links which are dedicated to VPN traffic only (so when Bob in accounting downloads 100MB of family photos from Flickr it won't affect VPN traffic).
  3. If you combine internet and VPN traffic on one connection do not set QoS on inbound/ingress traffic.
share|improve this answer
Many places use QoS just on the LAN sides to ensure that their traffic gets priority out the VPN. MPLS will not necessarily help you because your service provider may or may not allow you to prioritize the traffic. Verizon for example will drop the high priority traffic if you are not paying for any of your bandwidth to be high priority. –  sparks Nov 5 '09 at 22:48
add comment

It may depend on which model of Sonicwall Firewall and it's software you have but you should be able to define a 'Quality of Service' (QoS) for your VoIP traffic. This can be complex and implementing this may require some professional help.

It PAINS me to point you here but this question appears to have been asked on expert-sexchange.com before, perhaps you could look there too.

share|improve this answer
add comment

Your Answer


