A very high-quality voice is achieved over public IP links using Dell SonicWALL firewalls by following the instructions in this guide.

Versature has tested the specific configuration described in this article in both lab and real-world environments. Further, other configurations have proven to either not achieve high-quality voice or cause serious issues with other non-voice traffic on the WAN.

Versature recommends the use of SonicWALL’s Global bandwidth management mode, as some firmware versions contain a bug, which causes dropped network traffic when implementing other modes.

Configuring the appliance is a 4 step process:

1. Configure Global Bandwidth Management.
2. Set all interface ingress and egress speeds.
3. Create Address Objects and an Address Group.
4. Create a firewall rule to mark traffic.

STEP 1: CONFIGURE GLOBAL BANDWIDTH MANAGEMENT

1. To configure bandwidth management or BWM, under Firewall Settings, select BWM and configure:

1. Set the Bandwidth Management Type to Global using the radio button.
2. Enable the Realtime priority level using the checkbox.
3. Configure the Realtime priority level to be Guaranteed 100% of bandwidth with a Maximum/Burst of 100%; this will ensure that voice is always permitted to use the available WAN bandwidth.
4. Set the other enabled priority levels to 0% and 85%.

STEP 2: SET INTERFACE SPEEDS 

1. Under Network, choose Interfaces to access the Interface Settings area.
2. Click on the pencil icon for your WAN link to bring up the Edit Interface window.
3. Choose the Advanced tab and configure: 
   1. Enable Egress and Ingress Bandwidth Management using the two checkboxes.
   2. Configure the Egress bandwidth (upload) and Ingress bandwidth (download), to the actual speeds provided by the link, less 500 Kbps. Use a service such as http://www.speedtest.net to verify the speed of the link, preferably by connecting a laptop directly to the link with no other devices connected to avoid inaccurate measurements.

STEP 3: CREATE ADDRESS OBJECTS AND ADDRESS GROUP 

First, add address objects.

ADDRESS OBJECTS 

1. Under Network, select Address Objects.
2. Scroll down to Address Objects and click the Add… button to create a new object.
   
3.  The form that appears has four properties:
   
4. Four Address Objects will be required, all with Zone Assignment set to WAN and Type set to FQDN. Select values for Name and FQDN Hostname from the following table: 

We will then add the four Address Objects created in the previous step to a new Address Group.

ADDRESS GROUP 

1. From the same Address Objects area, click the Add Group… button.
   
2. Name the new Address Group “Versature Prioritized Voice” and add the four previously created Address Objects to it using the right arrow. 
   

STEP 4: CREATE FIREWALL RULE TO MARK TRAFFIC 

1. Under Firewall, select Access Rules. 
2. Click on the arrow corresponding to LAN to WAN rules in the matrix.
   
3. From the next screen, which shows all firewall rules governing traffic from the LAN to the WAN, click Add. 
   
4. In the firewall rule screen, starting in the General tab:
   1. Set Service to Any, 
   2. Source to Any, and,
   3. Destination to the previously created Address Group: Versature Prioritized Voice.
      
5. Continuing by selecting the BWM tab, ensure both Enable Egress Bandwidth Management and Enable Ingress Bandwidth Management are enabled using the checkboxes.
6. Leave both Bandwidth Priority menus set to 0 Realtime.