PfSense with two WANs, routing Skype traffic over a specific WAN

pfsensepolicy-routingskypewide-area-network

I have a pfSense setup with two WANs (WAN1 and WAN2) and one LAN network. The two WANs are setup for failover.

However, QoS has recently been an issue for Skype calls in our office (about 30 people) so we want to dedicate WAN2 for Skype traffic (we use Skype for all VOIP calls, etc.)

As Skype is notoriously difficult to deal with, does anyone have any suggestions on how I should deal with this? A simple rule based on ports will not work, and using layer 7 inspection with a Skype profile on all incoming LAN packets doesn't seem like the way to go either. Here is a related pfSense forum post: Multi-WAN, single LAN; Route VOIP/Skype traffic over one WAN

Best Answer

From what I understand, the only traffic shaping library that successfully classifies Skype traffic is nDPI which is included with nTop. http://www.ntop.org/products/ndpi/

How can this interface with pfSense? I'm not sure, but they're both open-source projects, so perhaps you can convince one to work with the other through a bounty!

Related Solutions

Router – Best way to split LAN computers on two WANs (not load balancing)

We've done this before in PFSense.

If your IP addresses are grouped together it's easier, otherwise you have to create a rule for each and every IP address.

In the WAN Firewall rules, create a rule matching:

Protocol: any
Source: x.x.x.x (or a range, if appropriate)
Destination: any
Gateway: (select WAN connection)

You might want to create two failover groups (WAN1->WAN2, and WAN2->WAN1) so that if one WAN goes down it will failover to the other WAN, but won't use it otherwise (if this is appropriate)

Pfsense multi-site VPN VOIP deployment

Either IPsec or OpenVPN will meet your needs there. In general, either are equally suited from your description. There's a lot more to it than that, more than I can detail here, which is detailed in the pfSense book. http://pfsense.org/book

Best Answer

Related Solutions

Router – Best way to split LAN computers on two WANs (not load balancing)

Pfsense multi-site VPN VOIP deployment

Related Topic