Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Microsoft Teams bad Network quality / drops out of meeting

    Scheduled Pinned Locked Moved General pfSense Questions
    teams
    32 Posts 7 Posters 5.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      KoenH @SteveITS
      last edited by

      @steveits I've applied the limiters with FQ_CODEL to try if it worked better. On recommondation of a simular issue with Teams on Reddit.

      I've applied the shaping on a WAN floating rule, is that ok?

      1 Reply Last reply Reply Quote 0
      • K
        KoenH @stephenw10
        last edited by

        @stephenw10

        There was a meeting at 11:30 and the connection did drop.

        Packets
        c7a56cff-eb39-47d2-9719-7561d026b435-image.png

        Quality
        827204a4-e51b-408d-a286-f644f640652b-image.png

        Looks normal to me?

        stephenw10S 1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator @KoenH
          last edited by

          Yeah, no problem shown there.
          Are you monitoring the gateway IP directly or something upstream?

          Do you see issues with any other traffic/application?

          Steve

          K 1 Reply Last reply Reply Quote 0
          • K
            KoenH @stephenw10
            last edited by

            @stephenw10

            Hi Steve

            I've gathered the screenshots of the monitorringtool. Or are you mentioning something different?

            No i don't see any issues on different tools, only when my girlfriend performing videocalls with Teams during homework.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              That is what I mean but if it's an issue upstream of the gateway IP you would not see it there.

              That's why it's often better to monitor some external public IP like 8.8.8.8 or 1.1.1.1 to real idea of connectivity.

              Steve

              K 1 Reply Last reply Reply Quote 0
              • K
                KoenH @stephenw10
                last edited by

                @stephenw10

                Hi Steve

                So what should i do next?
                I have followed this youtube video: video
                And my firewall rules are just the same.

                Today, the meetings kicked out again my girlfriend due to bad network quality?

                I don't know what to check even more.

                G 1 Reply Last reply Reply Quote 0
                • G
                  gnordli @KoenH
                  last edited by

                  @koenh I have been having issues with Teams as well.

                  did you run the network assessment tool?

                  https://www.microsoft.com/en-us/download/details.aspx?id=103017

                  did you open up the required UDP ports as well?

                  K 1 Reply Last reply Reply Quote 0
                  • K
                    KoenH @gnordli
                    last edited by

                    @gnordli thank you for the tip!

                    im running the tool and get:

                    Connectivity check source port range: 50000 - 50019

                    Relay : 52.114.93.15 is the relay load balancer (VIP)
                    Relay : 52.114.93.15 is reachable using Protocol UDP and Port 3478
                    Relay : 52.114.93.15 is QOS (Media Priority) enabled

                    Starting Service Connectivity Check:
                    Relay : 52.114.93.15 is the relay load balancer (VIP)
                    Relay : 52.114.93.15 is reachable using Protocol PseudoTLS and Port 443
                    Relay : 52.114.93.15 is the relay load balancer (VIP)
                    Relay : 52.114.93.15 is reachable using Protocol FullTLS and Port 443
                    Relay : 52.114.93.15 is the relay load balancer (VIP)
                    Relay : 52.114.93.15 is reachable using Protocol HTTPS and Port 443
                    Relay : 52.112.212.14 is the actual relay instance (DIP)
                    Relay : 52.112.212.14 is reachable using Protocol UDP and Port 3478
                    Relay : 52.112.212.14 is the actual relay instance (DIP)
                    Relay : 52.112.212.14 is reachable using Protocol UDP and Port 3479
                    Relay : 52.112.212.14 is the actual relay instance (DIP)
                    Relay : 52.112.212.14 is reachable using Protocol UDP and Port 3480
                    Relay : 52.112.212.14 is the actual relay instance (DIP)
                    Relay : 52.112.212.14 is reachable using Protocol UDP and Port 3481

                    Relay connectivity and Qos (Media Priority) check is successful for all relays.
                    Service verifications completed successfully


                    When running the tool with /qualitycheck:

                    Reflexive IP is my WAN

                    Result:

                    2022-02-08 21:41:58 Loss Rate: 0 Latency: 26,06 Jitter: 15,59 Protocol: UDP
                    Local IP: IP-LAPTOP:50016 Remote IP: 52.113.203.106:3478
                    Is Proxied Path: False Last Known Reflexive IP: ...:36796


                    The firewall rules on my VLAN are:
                    00a5b2e6-98d7-4199-a4ad-6b260cb41c6e-image.png

                    Or do i have to port forward the UDP ports ?

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      SteveITS Galactic Empire @KoenH
                      last edited by

                      @koenh You don't need to forward any inbound ports to the PC running Teams.

                      Does the Traffic Graph show high traffic while this is happening?

                      300/20 should be way more than enough unless something is maxing out the connection. Have you run the speed test from her computer?

                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                      Upvote 👍 helpful posts!

                      K 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Are you still monitoring the gateway IP or have you set something external yet?

                        K 1 Reply Last reply Reply Quote 0
                        • K
                          KoenH @SteveITS
                          last edited by

                          @steveits

                          b86b1f24-8cee-450f-8b83-df806c429451-image.png

                          This is during the /qualitycheck.

                          Yes i have run multiple speedtests and all are looking stable and providing enough speed.
                          Most tests returned +- 150/15 (wifi), should be enough for Teams.

                          1 Reply Last reply Reply Quote 0
                          • K
                            KoenH @stephenw10
                            last edited by

                            @stephenw10

                            Could you explain me how i monitor the gateway IP?
                            Especially how to monitor an external one?

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              In System > Routing > Gateways edit the gateway and set an alternative monitoring IP.

                              https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html

                              Steve

                              K 1 Reply Last reply Reply Quote 0
                              • N
                                netblues @KoenH
                                last edited by

                                @koenh said in Microsoft Teams bad Network quality / drops out of meeting:

                                Since the switch to pfsense, my girlfriend noticed she get’s kicked from teamsmeetings with video and screensharing. Before the kick she receives a pop up of “Bad network quality”.
                                Her laptop is placed in the Guest-network.

                                Teams rarely needs more that 2-3 mbits of traffic both ways.
                                Is the laptop connected wifi? Have you tried ethernet cable?
                                How is the wifi neighborhood?
                                5g? 2.4g?

                                And as a last resort, have you tried swapping girlfriends?

                                K 1 Reply Last reply Reply Quote 0
                                • K
                                  KoenH @netblues
                                  last edited by

                                  @netblues

                                  Indeed, doesn't require a lot of speed.
                                  The laptop is connected to wifi and she uses 2.4GHz, because the room she is working don't have a network cable / distance is too long (don't have that cable length).
                                  I have switched my USG for a pfSense and before the switch everything was running fine. So my only guess is that something is not functioning right with in my setup.

                                  And i woodn't dare (last question) ;-).

                                  GertjanG 1 Reply Last reply Reply Quote 0
                                  • K
                                    KoenH @stephenw10
                                    last edited by KoenH

                                    @stephenw10

                                    I'm a bit confused now.
                                    The gateways are showing my WAN gateway, do i need to configure every gateway for every VLAN here?

                                    (WAN IP hidden, just left the .1)
                                    6c1f91ab-348f-450e-a6e9-bb9994c84eae-image.png

                                    I've added the gateway of the Guest network and will look at the monitoring tonight.

                                    stephenw10S 1 Reply Last reply Reply Quote 0
                                    • GertjanG
                                      Gertjan @KoenH
                                      last edited by

                                      @koenh said in Microsoft Teams bad Network quality / drops out of meeting:

                                      uses 2.4GHz

                                      Some observations :

                                      That's the 'legacy' band, the historical one with close to 11 canals (really usable 1,5 and 11).
                                      The legacy band is often a mess ..... but, as you can't see or smell it, people tend to say 'Internet is bad".
                                      Not all APs are equal, neither.
                                      Even in 2022, when you suspect a network issue, the very first thing you should do : remove Wifi from the equitation. We can't see or measure easily the quality of a radio connection.
                                      Cable-up and retest.

                                      Next step : monitor bandwidth closely.
                                      Try to download and upload "huge" files to a known server with way more bandwidth as at your place. The bottleneck will be : your ISP, and the route to this server.
                                      Be aware that every uplink technology (cable, fibre, adsl, satellite etc) has its advantages and disadvantages.

                                      Do some speed tests. This one is shows more then just the speed. And do them regularly.

                                      And remember : ISPs will give you the bandwidth available. What's available at instance X doesn't even depend on them (exception : you hired a uplink with a guaranteed bandwidth - this is very $$$ or €€€ ).

                                      ISP's 'peering' (POPs) to the 'backbone' of the Internet, or directly the the big players, like FB, Twitter, Google, Netflix, etc. These peerings (the actual interconnections) are expensive. ISP's main goal will always be : sell as much subscriptions as possible, buy as less peering possible.

                                      If all the above factors are (somewhat) excluded, then you can focus on pfSense.
                                      Using the defaults settings, a pfSense box with a sub 25 $ ( ? ) processor can do several hundreds of Megabit / sec. There is always the chance you've a bad cable/switch or NIC somewhere. These local issue can be determined easily and rapidly : just swap stuff.
                                      A worst case scenario is : make your own pfSense from scratch. You'll be needing a (very) old ancient desktop PC - a Ethernet adapter with two ports ans an USB drive. You system, based upon some Intel or AMD, will do close to (or even more) a Gigabit / sec. It will be big, ugly and a power drain, but it will work. It will take you 15 minutes, inserting the NIC included. If the issue persists, you will know the issue is not your original pfSense box - or pfSense for that matter.

                                      No "help me" PM's please. Use the forum, the community will thank you.
                                      Edit : and where are the logs ??

                                      K 1 Reply Last reply Reply Quote 0
                                      • K
                                        KoenH @Gertjan
                                        last edited by

                                        @gertjan

                                        The pfSense i configured is actually a build one. I’ve installed pfSense on a Minisforum GK41.
                                        The Specs it is showing are more then good.

                                        Also like i mentoined before, i was a UniFy USG before my pfSense. With the USG i had no troubles with Teams. Now using pfSense and there are issues.

                                        johnpozJ 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @KoenH
                                          last edited by johnpoz

                                          @koenh I use teams and webex pretty much every day, been work from home since very start covid.. Like 2 years going on - and have never seen any issues..

                                          I'm not using any sort of shaping or limiting..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          K 1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator @KoenH
                                            last edited by

                                            @koenh said in Microsoft Teams bad Network quality / drops out of meeting:

                                            The gateways are showing my WAN gateway, do i need to configure every gateway for every VLAN here?

                                            No. That's showing the gateways pfSense is using so seeing only one there is expected. You would have more if you have multiple WANs or other gateway types such as VPNs or on internal router with subnets behind it.

                                            @koenh said in Microsoft Teams bad Network quality / drops out of meeting:

                                            I've added the gateway of the Guest network

                                            Not sure exactly what you mean there. What I expect is to edit the WAN_DHCP gateway and set the monitoring IP to 8.8.8.8 or some other external pingable IP.

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.