port 5060 traffic priority

Forum|Forum|9 years ago
November 22, 2016
9 replies
8564 views

Hello,

What's the best way to prioritize all traffic on 5060? Softphone traffic goes over that so it's critical that regular internet traffic (softphones are run on the computers that are on the data vlan) doesn't impede upon it. Ideally the way it would be set up would be that nomatter what people are doing on the data vlan, maxing the circuit or whatever, 5060 traffic is not impeded in any way. Any help would be appreciated.

Thanks,

Brendon

emilec

New Member

Really depends on your usage profile. If you have heavy internet users you can use a combination of lowering priority and capping max speed the on the bulk web traffic along with high priority and guaranteed bandwidth for SIP (and don't forget RTP ports).

Ideally you should have a separate link dedicated to voice.

bfeoleAuthor

New Member

emilec wrote:
Really depends on your usage profile. If you have heavy internet users you can use a combination of lowering priority and capping max speed the on the bulk web traffic along with high priority and guaranteed bandwidth for SIP (and don't forget RTP ports).
Ideally you should have a separate link dedicated to voice.

I don't have a separate link for desk phones, but I do have the data vlan capped to 90% of total bandwidth (I didn't use a percent, I just can't remember what the actual number is) to leave overhead for voip, so the voip vlan is fine. Desk phones use the voip vlan. I suppose I could cap the bulk web traffic a little lower than 90% to give overhead for the softphones (that use the data vlan) as well. Thanks for the help. Also I know voip doesn't use a lot of data but I'm starting by giving voip more room to work with and if I see it only ever uses half of that, I'll lower it some. I'd rather give it too much than too little.

What's the easiest way to get this set up? I guess I'd make a new firewall policy for sip and rtp but then I'm not sure what to do from there. I've already got a policy on the data vlan that says to limit the bandwidth overall, but then is there a way to limit general web traffic from within that limit? Maybe I need coffee for thinking this through :p

Thanks,

Me

bfeoleAuthor

New Member

I think I could do it this way -

Have a firewall policy for all voip ports on the data vlan - rtsp, sip, etc - that is unrestricted and has higher priority.

Then have a firewall policy for all other ports on the data vlan that is restricted to 90% of whatever the max bandwidth is and is lower priority.

That way there is still overhead for the deskphones on the voip vlan, and then now the voip on the data vlan can use that overhead as well.

Sign up

Login with SSO

Login to the community

Login with SSO