Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 5468 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Guarantee voip bandwidth over a site to site IPSec VPN

RichardPhillips

Hi,

I have a site to site VPN with XG210's at each end both running 16.01.2

At site A, there is a VOIP Vlan 172.16.100.0/24 and at site B there is  VOIP Vlan 172.16.101.0/24. Site B's handsets route to the voip controller at site A.

System works as it should, but when there is high demand on the line due to a file transfer, voice gets chopped up.

I understand that traffic shaping is available, but my understanding is that,s on external bandwidth, but not sure how I could apply that to traffic over a VPN. I think I may have to do a a new rule that is placed about the LAN/VLAN policies at both ends.

Given the line is in use constantly, I don't want to start making changes without seeking some advice first in case I make it a whole lot worse and actually restrict other services. I have not had the need yet to use traffic shaping so its new to me.

Thanks,
Richard.



This thread was automatically locked due to age.
Parents
  • 0

    Richard,

    you can apply traffic Shaping Policy on the LAN to VPN policy rule on each site. I advice you to create a proper LAN to VPN policy rule where you allow only VoIP traffic and then apply here the traffic shaping policy, then you create an above LAN to VPN rule with the rest of needed traffic.

    Thanks

Reply
  • 0

    Richard,

    you can apply traffic Shaping Policy on the LAN to VPN policy rule on each site. I advice you to create a proper LAN to VPN policy rule where you allow only VoIP traffic and then apply here the traffic shaping policy, then you create an above LAN to VPN rule with the rest of needed traffic.

    Thanks

Children
No Data