FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ssteo
Staff
Staff
Article Id 343085
Description This article describes how to configure QoS with DSCP marking for Microsoft Teams.
Scope FortiGate.
Solution

Below is the DSCP value table recommended by Microsoft.

 

Media traffic type Client source port range Protocol DSCP value DSCP class
Audio 50,000–50,019 TCP/UDP 46 Expedited Forwarding (EF)
Video 50,020–50,039 TCP/UDP 34 Assured Forwarding (AF41)
Application/Screen Sharing 50,040–50,059 TCP/UDP 18

Assured Forwarding

(AF21)

In FortiGate, it is necessary to create three services.

 

Microsoft Teams Audio.

 

Teams_Audio.png

 

Microsoft Teams Video.

 

Teams_Video.png

 

Microsoft Teams application and screen-sharing.

 

Teams_App.png

 

After that create firewall policy with DSCP value.

Policy 1 is for Teams audio.

Policy 2 is for Teams video.

Policy 3 is for Teams application and screen sharing.

 

Below are the configuration templates:

 

config firewall policy
    edit 1
        set srcintf lan
        set dstintf wan
        set srcaddr all
        set dstaddr all
        set action accept
        set schedule always
        set service Teams_Audio
        set diffserv-forward enable
        set diffservcode-forward 101110
        set diffserv-rev enable
        set diffservcode-rev 101110
    next

    edit 2
        set srcintf lan
        set dstintf wan
        set srcaddr all
        set dstaddr all
        set action accept
        set schedule always
        set service Teams_Video
        set diffserv-forward enable
        set diffservcode-forward 100010
        set diffserv-rev enable
        set diffservcode-rev 100010
    next

    edit 3
        set srcintf lan
        set dstintf wan
        set srcaddr all
        set dstaddr all
        set action accept
        set schedule always
        set service Teams_App&ScreenSharing
        set diffserv-forward enable
        set diffservcode-forward 010010
        set diffserv-rev enable
        set diffservcode-rev 010010
    next
end

 

Related documents:

Implement Quality of Service (QoS) in Microsoft Teams

Technical Tip: Differentiated Services Code Point (DSCP) marking