SonicWall Router

Note: Tests indicate that QoS does not seem to work when Address object types are set as FQDN. (Conversely, the Host, Range, or Network types seem to work just fine.) The TZ100, in particular, exhibits high traffic security.

Administrative Information

  1. Make sure your router is powered on and connected to your network.
  2. In a browser on a computer on the same network as the router, navigate to the following IP address: 192.168.168.168 (X0).
  3. Log in (default credentials shown below).
    • Username: admin
    • Password: password

Tested on the following firmware versions:

  • Firmware Version 5.2.0.1
  • Firmware Version SonicOS Enhanced 5.5.1.0-5o
  • Firmware SonicOS Enhanced 5.8.1.9-58o
  • Firmware SonicOS Enhanced 5.8.1.12-65o

Adding/editing 8x8 subnets is recommended when available. Please click here and review the Traffic Shaping and Specific Subnet/Port Configuration section. (Login required.)


QoS Configuration

  • Essentially we are telling the router how much bandwidth is available and how much bandwidth to set aside for 8x8.
  • Creating Service (port) objects/groups to cover signaling/media seems to produce results just as good as the Edgewater routers.
  • Creating Address (IP Address) objects/groups to cover signaling/media also works well as long as the type of the object is set to Host, Range, or Network. There appears to be a bug at this time where FQDN does not improve call quality due to the router being unable to resolve DNS SRV records.

1. Disable Consistent NAT and SIP Transformations.

VoIP > Settings

2. Change Default UDP Connection Timeout Value from 30 to 300 seconds & Ensure UDP Flood Protection is not Enabled (disabled by default).

(Note: For other models or firmware versions, try looking under Firewall Settings > Flood Protection.)

3. Add Address Objects (8x8 Subnets).

Firewall > Address Objects

4. Add Address Group (Add the 3 Objects Created Above).

5. Modify Bandwidth Management.

Firewall Settings > BWM

  • BWM Type: Global
  • 0 Realtime Priority: Enable
  • Configure BWM with network-appropriate "guaranteed" percentages.

6. Create Access Rule (LAN to WAN).

Firewall > Access Rules: LAN to WAN

In the screen below, Destination is 8x8 Subnets (the Address Group created in Step 4).

Change UDP Connection Inactivity Timeout to 300.

Change 802.1p Marking Action to Preserve.

Set Bandwidth Priority to 0 Realtime (the priority set in Step 5).

7. Configure Download and Upload Bandwidth.

Network > Interfaces > Configure WAN

Note: Modify accordingly (available bandwidth will vary).