<div>
<div class="content wysiwyg-content">
I have 2 Draytek 2860's connected via an ipsec vpn tunnel.<br />
I want to enable QoS for the internal phone system so that I can reserve some of the bandwidth of the vpn link for phone traffic.<br />
<br />
In Bandwidth Management / Quality of Service I created a ‘Service Type’ called LAN-LAN, protocol TCP, port number 51 (for ipsec).<br />
I then edited the ‘Class 1’ rule, local address Any, remote address the ip of the other Draytek, service type IPSEC-AH (IP:51)<br />
Then clicked Setup on WAN2 (the active WAN connection), enabled the QoS control for BOTH directions, set the inbound and outbound bandwidths and reserved 25% for Class 1.<br />
I haven’t ticked ‘Enable UDP Bandwidth Control or Outbound TCP ACK Prioritize as I didn’t know what they were for.<br />
I then replicated this setup on the other Draytek.<br />
If someone could tell me if I have set it up right I would be very grateful.<br />
<br />
Thanks.
</div>
</div>


I have 2 Draytek 2860's connected via an ipsec vpn tunnel.
I want to enable QoS for the internal phone system so that I can reserve some of the bandwidth of the vpn link for phone traffic.

In Bandwidth Management / Quality of Service I created a ‘Service Type’ called LAN-LAN, protocol TCP, port number 51 (for ipsec).
I then edited the ‘Class 1’ rule, local address Any, remote address the ip of the other Draytek, service type IPSEC-AH (IP:51)
Then clicked Setup on WAN2 (the active WAN connection), enabled the QoS control for BOTH directions, set the inbound and outbound bandwidths and reserved 25% for Class 1.
I haven’t ticked ‘Enable UDP Bandwidth Control or Outbound TCP ACK Prioritize as I didn’t know what they were for.
I then replicated this setup on the other Draytek.
If someone could tell me if I have set it up right I would be very grateful.

Thanks.

Draytek QoS setup

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.