5060 or whatever wouldn't help, that is for SIP, but the audio is RTP which uses dynamic ports.  you could try setting an outbound rule for UDP that specifies the voip queue, and put that rule in front of the default rule (to see that default rule, go to firewall -> rules -> LAN and add the new rule before the default one.

yup … if u have more BW then it's not problem ...

@crnet ...
thanks to give a good direction ...

i like this ... and it wont destroy anything ...
give a courage to eksplore ...

Hello,
I think I understand your misunderstanding of the graphs :

In fact you shouldn't read the different curves as beeing represented on the same graph, and thus adding their max to compute your total bandwidth, but the total bandwith used by the queues is the skyline, the out shape of the curve, while each color represents what place each queue reprensents in this whole.

So on the former examples you shouldn't read that the mustard queue uses 1 Mb/s, it only uses what the others have let to her, corresponding exactly to the mustard part of the curve you see. There's no "hidden" mustard :-)

Michel

http://forum.pfsense.org/index.php/topic,16463.msg136134.html#msg136134

The first Step might be to use the wizard and to activate possible options even if you dont use them right now.
The result is a list of rules, where you can tweak them to your needs.

The "big problem" with TC is to understand wht is does, not to set it up cool in pfSense.

This may help:
http://www.openbsd.org/faq/pf/queueing.html

Yes - you set up queues (where you can setup Bandwidth limits, Priority etc.) and group the IPs into them.

http://forum.pfsense.org/index.php/topic,23293.msg121039.html#msg121039

Bump
Anyone?

Just a beginner myself? but have you tried firewall->Traffic shaper -> EZ Shaper wizard. I run that initially then modified the queues and (vaguely remember adding IP rangers) (not 100% its working fully). My setup was too (try) and have torrents @ full speed until someone tried to use the web. which then slowed the torrents until web access finished. seems to be a bit of discussion with those in the know how effective this is.  your setup may be totally different

Read some of the stickies in this section http://forum.pfsense.org/index.php/board,26.0.html

I have been study and exploring about pfsense.  I like it very much but in a lost to configure and implement.

Scenerio:
Wan1 - 2M w Public IP Address
Wan2 - 2M w Public IP Address

一LAN

???????

indeed,  there are no internet routers in the mix, but there is an ipsec tunnel.  that might explain it.  thanks for helping me talk it out.

Yes, just in the semicolon separated list of custom options put

Thanks for the info. Please keep us updated.

The easiest way is what the previous message described. Just disable nat and leave the firewall inspection in place and setup rules allowing free flow of traffic. I use several pfsense firewalls this way.

The RRDs would be more accurate than looking at interface stats at the shell, since they will persist across reboots and don't roll over/reset like the interface counters (which wrap after a while)

Relying on RRDs could end up worse because you think you're protected and it would almost always estimate low (especially with missing data) so you'd nearly always exceed what you expected.