I'm trying to set a bandwidth priority for my Vonage VoIP customers. I'm currently just trying to setup my Mangle rules to flag the masqueraded traffic as VoIP traffic. I want to verify that I'm indeed flagging the Vonage VoIP traffic, before I go forward with the queue tree setup.
Currently, the customers are connected via PPPoE on my internal router. I'm doing the mangle and masquerade rules on my core router.
Vonage's web site states that the following ports are used for their traffic:
SIP ports 5060-5061 using UDP
NTP port 123 using UDP
TFTP port 69 using UDP
DNS port 53 using UDP
RTP ports 10,000-20,000 using UDP
I added the following mangle rules:
jan/31/2005 09:38:59 by RouterOS 2.8.22
/ ip firewall mangle
add src-address=172.16.20.0/24:5060-5061 protocol=udp action=passthrough mark-connection=vonage-con comment="Vonage
connection mark UDP ports 5060-5061-SIP" disabled=no
add src-address=172.16.20.0/24:123 protocol=udp action=passthrough mark-connection=vonage-con comment="Vonage connection
mark UDP ports 123-NTP" disabled=no
add src-address=172.16.20.0/24:69 protocol=udp action=passthrough mark-connection=vonage-con comment="Vonage connection
mark UDP ports 69-TFTP" disabled=no
add src-address=172.16.20.0/24:10000-20000 protocol=udp action=passthrough mark-connection=vonage-con comment="Vonage
connection mark UDP ports 69-RTP" disabled=no
add connection=vonage-con action=passthrough mark-flow=vonage-traf comment="Vonage flow mark" disabled=no
I seem to be getting a lot of non-VoIP traffic coming through the SIP and RTP mangle rules and I'm not getting any packets on the TFTP rule.
Could someone double check my mangle rules and see if they look correct?
Could someone explain what the seperate ports are used for in a Vonage/VoIP call? Do I need to make them all priority or do I need just to give priority to the RTP ports in order to accomplish my goal?
Again, my I'm trying to learn as much as possible on TCP/IP port usage, so I'm not totally familiar with other normal/potential applications that access any of these same ports called out on Vonage's web page.
Thank you ![]()