Watchguard Firebox M200 Manuale utente

WatchGuard M200 Firewall/Router

QoS Configuration Guide

QoS Configuration Guide | WatchGuard M200 | Contents

Contents

Intr

oduction . . . . . . . . . . . . .

Performance and Capacities

. .

. . . . . . . . . . . . . . . . . . . . 3

. . . . . . . . . . . . . . . . . . . . . 3

Configure Your

Fir

ewall . . . . . .

. .

. . . . . . . . . . . . . . . . . . . . 4

WatchGuard M200 Firewall Configuration

. . . .

Quality of Service . . . . . . . . . .

Test Your Connection Capacity

Supported Browsers for Test . .

Test Your Connection Quality .

. 10

. 11

Ports and Firewalls Settings for RingCentral VoIP Service

QoS Configuration Guide | WatchGuard M200 | Introduction

Introduction

Because smaller companies are generally less protected and easier

to break into, small business has become the new big target for

cyber-attacks. The Firebox M200 firewall is specifically engineered

to defend all types of small businesses against attacks that are no

less fierce than those targeting larger organizations..

The Firebox M200 Unified Threat Management (UTM) solution is up to

3 times faster than competing products with all security layers turned

on, and up to 94 percent faster performing HTTPS inspection, ensuring

businesses never have to compromise network security for

performance.

Key Security Features

Performance and Capacities

Ideal for small to midsize business

Recommended user count —60

IPsec VPN throughput —3.2 Gbps

AV —620 Mbps

IPS —1.4 Gbps

UTM —515 Mbps

1 Gig ports —8

Concurrent sessions —1,700,000



Enterprise-grade prevention, detection, correlation and response

from the perimeter to the endpoint with our Total Security Suite.

Latest generation multi-core processors provide the power to run

all security scanning engines in parallel without causing

performance bottlenecks..

Gain critical insights about network security, from anywhere and

at any time, with WatchGuard Dimension..

Built-in compliance reports, including PCI and HIPAA, mean one-

click access to the data you need to ensure compliance

requirements are met.

Up to 8 Gbps firewall throughput. Turn on additional security

services and still see up to 2.6 Gbps throughput.



•



Note:

The firewalls recommended here are quality hardware that we

have tested internally and work reliably with our services.

However, given the constantly updated firmware and physical

changes made by manufacturers and the nature of cloud-based

services, RingCentral cannot control the final configuration of

the hardware or your computer systems/networks, or promise

that any given firewall will work with your system, or guarantee

that our information is 100% up to date.

QoS Configuration Guide | WatchGuard M200 | Configure Your Firewall

Configure Your Firewall

WatchGuard M200 Firewall Configuration

To review the Quick Start Guide for the WatchGuard M200 click here. See the WatchGuard M200 Hardware Guide here.

1. Log into your WatchGuard. For information about logging into your WatchGuard GUI for first time setup, please refer to the

WatchGuard Quick Start Guide.

2. Navigate to ‘Firewall’and select subcategory ‘Aliases’. (Figure 1)

Figure 1

a. Once under ‘Aliases’, select

‘Add’. Name the new alias,

“RingCentral Servers”.

b. Under ‘Alias Members’ select

‘Add’. Create a new entry for

each of the following servers

found here under Section 7:

RingCentral Supernets.

c. Hit ‘Save’once all server

Supernets have been added.

Brand: WatchGuard

Model: M200

Firmware version: 11.12.4

QoS Configuration Guide | WatchGuard M200 | Configure Your Firewall

3. Navigate to ‘Firewall’and select subcategory ‘Firewall Policies’. Hit the ‘Add Policy’button.. (Figure 2)

Figure 2

QoS Configuration Guide | WatchGuard M200 | Configure Your Firewall

4. In Figure 2 above, under ‘Select Policy Type’hit ‘Custom’. Then hit ‘Add’.

Name your new policy “RingCentral”.

Keep ‘Type’as Packet Filter.

Under Protocols, enter all applicable RingCentral ports.

Current ports can be found here in Appendix B. (Figure 3)

Enable “Specify custom idle timeout”by hitting the checkbox,

and change the value to ‘300’.

Hit ‘Save’.

Then hit ‘Add Policy’.

Figure 3

QoS Configuration Guide | WatchGuard M200 | Configure Your Firewall

5. Now we need to finalize the configuration of the RingCentral Policy. Under the ‘Settings’tab: (Figure 4)

In the ‘From’table, change it from ‘Any-trusted’to ‘Any’, change if you have VLANs setup and want to specific ‘From’endpoints.

In the ‘To’ table, hit ‘Add’and select the previously added ‘RingCentral Servers’. Remove the default entry ‘Any-External’.

Enable “Specify custom idle timeout”by hitting the checkbox, and change the value to ‘300’.

Figure 4

QoS Configuration Guide | WatchGuard M200 | Configure Your Firewall

6. Now navigate to the ‘Traffic Management’tab. (Figure 5)

Under ‘Forward Action (From > To)’, hit ‘Add’. To help calculate these values, check here on Section 10.

ii.

iii.

iv.

Name is ‘RC BWM’

Change ‘Maximum Bandwidth’ to values specific to your environment.

Change ‘Guarantee Bandwidth’ to values specific to your environment.

Hit ‘Save Changes’.

Figure 5

Under ‘Reverse Action (To > From)’, select ‘RC BWM’from the dropdown.

QoS Configuration Guide | WatchGuard M200 | Configure Your Firewall

7. Now navigate to the ‘Advanced’tab. (Figure 6)

a) Browse down to the ‘QoS’section and modify the following values:

ii.

iii.

iv.

Change ‘Marking Type’to ‘DSCP’

Change ‘Marking Method’to ‘Assign’

Change ‘Value’to ’46 (EF)’

Change ‘Prioritize Traffic Based On’to ‘Custom Value’

Change ‘Value’to ‘7 (Highest)’

Figure 6

8. Hit ‘Save’at the bottom.

9. Select the new Policy ‘RingCentral’and change it to Order 1. Once set, hit ‘Save Policy Order’.

QoS Configuration Guide | WatchGuard M200 | Quality of Service

Quality of Service

RingCentral provides reliable, high-quality voice service. Your local

network, internet connection, and your router all contribute to overall call

quality, with sufficient dedicated bandwidth to voice calls being the biggest

factor. To help you manage your call quality, RingCentral offers tools to

check your internet connection speed, and instructions to configure the

Quality of Service (QoS) settings of your routers.

The QoS settings on your router enable it to give priority to real-time voice

traffic over lower-priority data traffic, such as large downloads. This

document provides recommended configuration settings to ensure the

highest-possible QoS experience on the WatchGuard M200

Firewall/Router. Please reference the relevant TCP/UDP settings on the

Ports and Firewalls table to complete the recommended setup.

Supported Browsers for Test

Internet Explorer® 11 or higher (Windows® XP, 7, 8 or higher)

Firefox® version 36 or higher (Windows and Mac®)

Safari version 6.2 or higher (Mac)



Test Your Connection Capacity

The RingCentral Connection Capacity test will help determine the maximum

number of simultaneous RingCentral calls that can be supported on your

broadband connection. Run this test during normal business hours when the

connection is in use by other applications, including large file downloads.

The capacity test should be run using the maximum number of simultaneous

call connections needed, and should use the G.711 codec selection.

Specific requirements for QoS:



Bandwidth—100Kbps up and down per call

Latency (one-way)—less than 150 ms

Jitter—not to exceed 100 ms

Packet loss—less than 3%

These requirements are the foundation for ensuring your local network can

support satisfactory VoIP. Failure to meet these requirements will result in

poor voice quality.

When the test completes, you will see the recommended number of

simultaneous calls your connection can support while maintaining good quality

voice calls.

Note:

The routers recommended here are quality hardware that we

have tested internally and work reliably with our services.

However, given the constantly updated firmware and physical

changes made by manufacturers and the nature of cloud-based

services, RingCentral cannot control the final configuration of

the hardware or your computer systems/networks, or promise

that any given router will work with your system, or guarantee

that our information is 100% up to date.

Altri manuali per Firebox M200

Indice

Altri manuali Watchguard Router di rete

Watchguard

Watchguard AP325 Manuale utente

Watchguard

Watchguard XTM 2 Series Istruzioni per l'installazione

Watchguard

Watchguard Wireless Router Manuale utente

Watchguard

Watchguard XTM 545 Istruzioni per l'installazione

Watchguard

Watchguard Firebox T20-W Manuale utente

Watchguard

Watchguard SOHO Manuale utente

Watchguard

Watchguard XTM 850 Istruzioni per l'installazione

Watchguard

Watchguard AP430CR Manuale utente

Watchguard

Watchguard Firebox Vclass V100 Istruzioni per l'installazione

Watchguard

Watchguard C-100 Manuale utente

Watchguard

Watchguard Firebox X10E Manuale utente

Watchguard

Watchguard Firebox T10-D Manuale utente

Watchguard

Watchguard XTM 810 Istruzioni per l'installazione

Watchguard

Watchguard XTM 25 Istruzioni per l'installazione

Watchguard

Watchguard XTM 5 Series Istruzioni per l'installazione

Watchguard

Watchguard Firebox T35 Istruzioni per l'installazione

Watchguard

Watchguard Firebox T15 Manuale utente

Watchguard

Watchguard Firebox SOHO 6 Wireless Manuale utente

Watchguard

Watchguard Firebox T55 Istruzioni per l'installazione

Watchguard

Watchguard Firebox T30 Istruzioni per l'installazione

Watchguard

Watchguard AP200 Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza