asked on

Sonicwall TZ 215 Config

X0- LAN1 Data Switch (192.168.1.0 network)
X1- WAN1 (FIOS)
X2- WAN2 (T-1)
X3- LAN2 VoIP switch (192.168.2.0 network)
X4 and X5 Portshield to X0

Pretty much I want all traffic for VoIP switch (X3) to use ONLY T-1 WAN (X2). All traffic from data switch (X0) can use ONLY FIOS (X1). I also have failover setup. Just want to make sure my setup is correct.

Custom Routing Policies 1:
Source: Address Object (VoIP Traffic- 192.168.2.0)
Destination: Any
Service: VOIP
Gateway: X2 Default Gateway
Interface: X2
Metric: 1
Priority: 8

Custom Routing Policies 2:
Source: LAN Primary Subnet
Destination: Any
Service: Any
Gateway: X1 Default Gateway
Interface: X1
Metric: 1
Priority: 11

Would also like to implement QOS for VOIP. I had some phone call quality issues a couple nights ago, but after adding custom routing policy 2 things improved.

masnrock

I would have done NAT policies. That way, it routes the traffic just the way you want it, and also does the translations properly.

Since you have one whole interface for VOIP and nothing else, you really will not need to do QoS. Is your VOIP system hosted or in house?

Pedro Guerrero

ASKER

VoIP system is hosted through ringcentral. After opening their required UDP ports phone quality has been great.

Can you explain exactly how NAT policies would work better than what I have?

ASKER CERTIFIED SOLUTION

masnrock

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Pedro Guerrero

ASKER

The two LANs do communicate; i will setup that rule today. I tested failover and works just fine.

My scan to email stopped working after I installed sonicwall. Getting a SMTP Gateway error. Any idea? Could it be router blocking access?

masnrock

Could be many different reasons. Is the email being sent to a relay outside of the network, or using an in house mail server?

Pedro Guerrero

ASKER

relay outside of network. was doing some troubleshooting and it worked using ip address of mail server. Looks like it may be a DNS issue? Everything DNS related on computers have been working just fine though.