Use Qos And Bandwidth Assignment To Shift The Traffic Mix - NETGEAR FVS318N Reference Manual

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
FTP server, or email server) and provide public access to them. The eighth LAN port on the
wireless VPN firewall (the rightmost LAN port) can be dedicated as a hardware DMZ port to
safely provide services to the Internet without compromising security on your LAN. By
default, the DMZ port and both inbound and outbound DMZ traffic are disabled. Enabling the
DMZ port and allowing traffic to and from the DMZ increases the traffic through the WAN
ports.
For information about how to enable the DMZ port, see
for IPv4 Traffic on page 72. For the procedures about how to configure DMZ traffic rules, see
Create DMZ WAN Rules
Exposed Hosts
Specifying an exposed host allows you to set up a computer or server that is available to
anyone on the Internet for services that you have not yet defined. For an example of how to
set up an exposed host, see
Host on page 130.
VPN and L2TP Tunnels
The wireless VPN firewall supports site-to-site IPSec VPN tunnels, dedicated SSL VPN
tunnels, and L2TP tunnels. Each tunnel requires extensive processing for encryption and
authentication, thereby increasing traffic through the WAN ports.
For information about IPSec VPN tunnels, see
Using IPv4 IPSec and L2TP
Chapter 7, Virtual Private Networking Using IPv4 SSL

Use QoS and Bandwidth Assignment to Shift the Traffic Mix

By specifying QoS and bandwidth profiles and assigning these profiles to outbound and
inbound firewall rules, you can shift the traffic mix to aim for optimum performance of the
wireless VPN firewall.
Assign QoS Profiles
The QoS profile settings determine the priority and, in turn, the quality of service for the traffic
passing through the wireless VPN firewall. You can assign a QoS profile to a firewall rule.
The QoS is set individually for each service. You can change the mix of traffic through the
WAN ports by granting some services a higher priority than others:
• You can accept the default priority defined by the service itself by not changing its QoS
setting.
• You can change the priority to a higher or lower value than its default setting to give the
service higher or lower priority than it otherwise would have.
For more information about QoS profiles, see
page 141.
on page 119.
LAN WAN or DMZ WAN Inbound Rule: Specifying an Exposed
Chapter 6, Virtual Private Networking
Connections. For information about SSL VPN tunnels, see
Preconfigured Quality of Service Profiles
Network and System Management
275
Configure and Enable the DMZ Port
Connections.
on