How to Configure WatchGuard XTM 21 Series Router
The purpose of this article is to provide a sample configuration. At the time of article creation, this device was in a known working state on the firmware used.
Keep in mind different firmware versions will interact with hosted VoIP services in different ways. While this device may be fully functional on the tested and/or current firmware version, it is possible newer revisions will cause disruptions in service or make a device fully compliant with the required settings for hosted VoIP services where it was previously not.
Note: Traffic Shaper / Bandwidth Management does not appear to actually set reserved traffic as specified.
Administrative Information
- Make sure your router is powered on and connected to your network.
- In a browser on a computer on the same network as the router, navigate to the following IP address: 10.0.0.1:8080.
- Log in (default credentials shown below).
- Username: admin
- Password: readwrite
Tested on firmware version 11.2.B257005.
Adding/editing 8x8 subnets is recommended when available. Please click here and review the Traffic Shaping and Specific Subnet/Port Configuration section.
Firewall Configuration
- Go to Firewall > Firewall Policies.
- Click Add to add the policies highlighted below.
Add Aliases (8x8 Servers)
Note: 8x8 subnets (server addresses) can be found in the 8x8 Work Technical Requirements document.
- Go to Firewall > Aliases.
- Enter 8x8 Servers in the Alias Name and Description fields.
- Add the 8x8 subnets by clicking the Add Member button.
- Click Save.
Configure Policies
- Go to Firewall > Firewall Policies.
- Add a Policy and go to Policy Configuration > Policy.
- Name the policy 8x8 and check the box to Enable it.
- Set Connections to Allowed.
- From Any-Trusted.
- Add 8x8 Servers in the To field
- Go to the Properties tab.
- Enter information for the ports as seen below.
- Check the box next to Specify custom idle timeout and set to the timeout to 300 seconds. This helps to prevent dropped calls.
- Go to the Advanced tab.
- Select the options below to enable the following in the NAT section:
- 1-to-1 NAT (Use Network NAT Settings)
- Dynamic NAT
- Select Use Network NAT Settings
- Click the checkbox next to Override Per-Interface Settings.
- Set the following values for QoS:
- Marking Type: DSCP
- Marking Method: Preserve
- Prioritize Traffic Based on: Custom Value
- Value: 7 (Highest)
- Click Save.
Traffic Management Policies
- Go to Firewall > Traffic Management > Policies.
- Add a Traffic Management Action called 8x8 Minimum.
- For the 8x8 Policy, select 8x8 Minimum as the Traffic Management Action.
- Click Save.
Configure Traffic Management Action Settings
- Go to Firewall > Traffic Management > Action Settings.
- Set the Outgoing Interface, Minimum Bandwidth, and Maximum Bandwidth to the values listed below.
- Click Save
