SonicWall Router

Note: Tests indicate that QoS does not seem to work when Address object types are set as FQDN. (Conversely, the Host, Range, or Network types seem to work just fine.) The TZ100, in particular, exhibits high traffic security.

Administrative Information

  1. Make sure your router is powered on and connected to your network.
  2. In a browser on a computer on the same network as the router, navigate to the following IP address: 192.168.168.168 (X0).
  3. Log in (default credentials shown below).
    • Username: admin
    • Password: password

Tested on the following firmware versions:

  • Firmware Version 5.2.0.1
  • Firmware Version SonicOS Enhanced 5.5.1.0-5o
  • Firmware SonicOS Enhanced 5.8.1.9-58o
  • Firmware SonicOS Enhanced 5.8.1.12-65o

Adding/editing 8x8 subnets is recommended when available. Please click here and review the Traffic Shaping and Specific Subnet/Port Configuration section. (Login required.)


Firewall Configuration

  • Creating Service (port) objects/groups to cover signaling/media seems to produce results just as good as the Edgewater routers.
  • Creating Address (IP Address) objects/groups to cover signaling/media also works well as long as the type of the object is set to Host, Range, or Network. There appears to be a bug where FQDN does not improve call quality due to the router being unable to resolve DNS SRV records.

Disable Consistent NAT and SIP Transformations

  1. Go to VoIP > Settings
  2. Ensure that the boxes for Enable Consistent NAT and Enable SIP Transformations are NOT checked.
  3. Enter the values below in the SIP Settings.


Disable UDP Flood Protection

  1. Go to Firewall Settings > Flood Protection.
  2. Change Default UDP Connection Timeout value from 30 to 300 seconds.
  3. Disable UDP Flood Protection by ensuring that the box next to Enable UDP Flood Protection is unchecked.


Add Address Objects (8x8 Subnets)

  1. Go to Network > Address Objects
  2. Under Address Objects, click Add.

  3. The Add Address Object pop-up window will appear. Enter the details for each Address Object below.
  4. Click Add after you are finished entering in the values below for each object.






Add Address Group

  1. On the Address Objects page, click Add Group.

  2. The Add Address Object Group pop-up window will appear. Enter 8x8 Subnets as the Name for this address object group.
  3. Select each 8x8 address and add them to the address object group.
  4. Click OK to save.


Bandwidth Management Settings

  1. Go to Firewall Settings > BWM (Bandwidth Management Settings).
  2. Enter the following settings:
    1. BWM Type: Global
    2. 0 Realtime Priority: Enable
    3. Configure BWM with network-appropriate percentages. The Total percentage should not exceed 100.

  3. Click Accept.

Set LAN/WAN Access Rules

  1. Go to Firewall > Access Rules.
  2. Next to View Style, select Matrix.
  3. Select the arrow in the LAN row under the WAN column. This will bring up a new screen for LAN to WAN Access Rules

Set Rules for LAN > WAN

  1. Click Add to create a new rule.

  2. Enter the values below in the General settings tab. Select 8x8 Subnets (the Address Group created above) in the Destination field.

  3. Go to the Advanced tab.
  4. Change UDP Connection Inactivity Timeout to 300.

  5. Go to the QoS tab.
  6. Change DSP Marking Action to Preserve.
  7. Change 802.1p Marking Action to Preserve.

  8. Go to the Ethernet BWM tab.
  9. Set Bandwidth Priority to 0 Realtime
  10. Click the Add button to save your changes.


Configure Download and Upload Bandwidth

Note: Modify accordingly (available bandwidth will vary).

  1. Go to Network > Interfaces.
  2. Click Configure (Pencil Icon) for X1 WAN

  3. Go to the Advanced tab in the Edit Interface window.
  4. Click the checkboxes to Enable Egress Bandwidth Management and Ingress Bandwidth Management with the corresponding available bandwidth values below.
  5. Click OK to save these changes.