Scribd
Upload
9 views

pfSense-Configuration-Guide (1)

This document provides step-by-step instructions for configuring pfSense firewalls to ensure proper Quality of Service (QoS) settings. Key steps include adjusting firewall optimization options, setting state timeouts, configuring outbound NAT, and prioritizing Voice over IP traffic through the Traffic Shaper wizard. It emphasizes the importance of working with IT departments for accurate bandwidth settings based on the number of concurrent calls.

Uploaded by

Pkumar
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
9 views

pfSense-Configuration-Guide (1)

This document provides step-by-step instructions for configuring pfSense firewalls to ensure proper Quality of Service (QoS) settings. Key steps include adjusting firewall optimization options, setting state timeouts, configuring outbound NAT, and prioritizing Voice over IP traffic through the Traffic Shaper wizard. It emphasizes the importance of working with IT departments for accurate bandwidth settings based on the number of concurrent calls.

Uploaded by

Pkumar
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 6

Follow the directions below to ensure proper configuration and QoS settings for the pfSense

firewalls. Please understand, instructions may vary based on the model and firmware
version of your device

1. Go to System > Advanced


2. Click Firewall & NAT
3. Set ‘Firewall Optimization Options’ to Conservative

1
Contact us at [email protected]

4. Under the ‘State Timeouts’ section set ‘UDP First, Single, and Multiple’ to 300

1. Go to Firewall > NAT


2. Click Outbound
3. Set ‘Outbound Nat Mode’ to Manual Outbound NAT rule generation (AON -
Advanced Outbound NAT)

(Contact our support team at [email protected] if you have not already received
them)

1. Go to Firewall > Rules


2. Click LAN

2
Contact us at [email protected]

3. Click Add
4. Add each TeleVoIPs IP one at a time in the destination.
a. Client Phone server IP(s)
b. Proxy IP(s)
c. Fax server IP(s)
5. Add each TeleVoIPs port one at a time.
a. SIP 5060-5160
b. RTP 10000-20000

1. Go to Firewall > Traffic Shaper.


2. Click Wizards.
3. Click Multiple Lan/Wan.

4. Enter the number of WAN type connections and LAN type interfaces.

3
Contact us at [email protected]

5. Select HFSC for ‘Interface & Scheduler.’


6. Make sure your Upload and Download speed is set correctly. If you have an internet
connection established on your pfSense, it should be set automatically. Enter your
interface WAN #1 upload and download speed. (Screenshot below is an example, every
network will have different up/down speed, we highly recommend working with your IT
department or system administrator for the correct up/down speed for your network.)

7. Click Next.
8. Under the ‘Voice over IP’ section Enable Prioritize Voice over IP traffic.
9. The next Step depends on how many users you have on your network. For the network in
the below example, it is highly unlikely that more than 5 people will have a phone call at
the same time. In this step we are going to set bandwidth we want to reserve for our VOIP
traffic, in this example we set the ‘Connection for WAN#1 and LAN#1’ limits to 1Mbit/s
Up/Down.
As a rule of thumb you can assume the following traffic rules:

Number of Concurrent Minimum Required Recommended


Calls Bandwidth Speed

1 100 Kbps Up and Down 3 MBps Up and


Down

4
Contact us at [email protected]

3 300 Kbps Up and Down 3 MBps Up and


Down

5 500 Kbps Up and Down 5 MBps Up and


Down

10 1 MBps Up and Down 5-10 MBps Up and


Down

1. Click Next.
2. The next steps are unique to each network, make sure you go through each section and
check anything that pertains to your network until you get to the end of the Wizard.
3. Confirm the wizard has created the proper queues for your network by navigating back
to Firewall > Traffic Shaper.
4. Click By Interface.
5. In this section, you can modify or adjust the queues that were created by the Wizard.
Note, this is the fastest and easiest way of creating the Traffic Shaping rules, but there are
multiple ways of creating these queues. You can find more information on creating these
rules by visiting the pfSense website and forums.

5
Contact us at [email protected]

You might also like