VOIP Traffic not in correct queues



  • I'm having a difficult time figuring out pfsense traffic shaping. I had a good grasp on m0n0wall which I used two years. I have run the wizard and chopped out most of the protocols that I never use. There are two
    sections that I need to know how to setup;

    1: Penalty Queues - I offer captive portal to people near me and would like to limit bandwidth dynamically for the users on the captive portal. The most bandwidth I want all users having would be 500kb up/ 4Mb dwn. Minimum 128k upload each and 1MB Download each. Alias for captive portal is CPnet 10.172.2.0/27

    XSL Output for PenaltyQueues

    <name>qPenaltyUp</name>
    <attachtoqueue>qwanRoot</attachtoqueue>
    <associatedrule>0</associatedrule>
    <priority>2</priority>
    <red>on</red>
    <ecn>on</ecn>
    <upperlimit>on</upperlimit>
    <upperlimit3>128Kb</upperlimit3>
    <bandwidth>1</bandwidth>
    <bandwidthtype>%</bandwidthtype>
    <qlimit>500</qlimit>

    • <queue><name>qPenaltyDown</name>
      <attachtoqueue>qlanRoot</attachtoqueue>
      <associatedrule>0</associatedrule>
      <priority>2</priority>
      <red>on</red>
      <ecn>on</ecn>
      <upperlimit>on</upperlimit>
      <upperlimit3>1000Kb</upperlimit3>
      <bandwidth>1</bandwidth>
      <bandwidthtype>%</bandwidthtype>
      <qlimit>500</qlimit>

    What I dont understand is why the rules are from WAN->LAN / LAN<-WAN. I use vlan tagging and VOIP is not on the LAN subnet but on its' own. Shouldn't those rules be CPnet->WAN and WAN->CPnet?

    • <rule><descr>Penalty IP</descr>
      <inqueue>qPenaltyUp</inqueue>
      <outqueue>qPenaltyDown</outqueue>
      <in-interface>wan</in-interface>
      <out-interface>lan</out-interface>
      -<source>
      <any>- <destination><address>CPnet</address></destination></any></rule>
    • <rule><descr>Penalty IP</descr>
      <inqueue>qPenaltyDown</inqueue>
      <outqueue>qPenaltyUp</outqueue>
      <in-interface>lan</in-interface>
      <out-interface>wan</out-interface>
      -<source>

    <address>CPnet</address>

    • <destination><any></any></destination></rule>

    The last question is the traffic shaping for VONage 96Kb/sec. I have read through all 6 pages and cannot figure out what it is Im doing wrong or what I should change. Calls do not go into the VOIP priority 1 queues at all. Alias for VOIP is Voip 192.168.2.6

    XSL Output for VOIP

    <name>qVOIPUp</name>
    <attachtoqueue>qwanRoot</attachtoqueue>
    <associatedrule>0</associatedrule>
    <priority>7</priority>
    <realtime>on</realtime>
    <realtime3>96Kb</realtime3>
    <bandwidth>25</bandwidth>
    <bandwidthtype>%</bandwidthtype></queue>

    • <queue><name>qVOIPDown</name>
      <attachtoqueue>qlanRoot</attachtoqueue>
      <associatedrule>0</associatedrule>
      <priority>7</priority>
      <realtime>on</realtime>
      <realtime3>96Kb</realtime3>
      <bandwidth>25</bandwidth>
      <bandwidthtype>%</bandwidthtype>

    Rules once again for the VOIP also show WAN->LAN and LAN->WAN.

    • <rule><descr>VOIP Adapter</descr>
      <inqueue>qVOIPDown</inqueue>
      <outqueue>qVOIPUp</outqueue>
      <in-interface>lan</in-interface>
      <out-interface>wan</out-interface>
      -<source>

    <address>Voip</address>

    • <destination><any></any></destination></rule>
    • <rule><descr>VOIP Adapter</descr>
      <inqueue>qVOIPUp</inqueue>
      <outqueue>qVOIPDown</outqueue>
      <in-interface>wan</in-interface>
      <out-interface>lan</out-interface>
      -<source>
      <any>- <destination><address>Voip</address></destination></any></rule></queue>


  • Sounds like you have more than 2 interfaces. The shaper doesn't really support more than 2 interfaces in pfSense 1.2. Search the forum and read up on the enhancements or better said completely rework of it for 1.3 at the bounty board.



  • Yes I have six vlan interfaces WAN, LAN, OP1, OPT2, OPT3, OPT4
    (WAN,LAN,VOIP,CAPTIVE PORTAL,WLAN,VENTRILO)


Locked