Creating Quality Of Service (Qos) Profiles - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
3. Click Apply to save your changes. The modified service is displayed in the Custom Services
Table.

Creating Quality of Service (QoS) Profiles

A Quality of Service (QoS) profile defines the relative priority of an IP packet when multiple
connections are scheduled for simultaneous transmission on the VPN firewall. A QoS profile
becomes active only when it is associated with a nonblocking inbound or outbound firewall rule
and traffic matching the firewall rule flows through the router.
After you have created a QoS profile, you can assign the QoS profile to firewall rules on the
following screens:
• Add LAN WAN Outbound Services screen (see
• Add LAN WAN Inbound Services screen (see
• Add DMZ WAN Outbound Services screen (see
• Add DMZ WAN Inbound Services screen (see
Priorities are defined by the "Type of Service (ToS) in the Internet Protocol Suite" standards,
RFC 1349.
There is no default QoS profile on the VPN firewall. Following are examples of QoS profiles that
you could create:
• Normal service profile. Used when no special priority is given to the traffic. You would
typically mark the IP packets for services with this priority with a ToS value of 0.
• Minimize-cost profile. Used when data must be transferred over a link that has a lower "cost."
You would typically mark the IP packets for services with this priority with a ToS value of 1.
• Maximize-reliability profile. Used when data must travel to the destination over a reliable link
and with little or no retransmission. You would typically mark the IP packets for services with
this priority with a ToS value of 2.
• Maximize-throughput profile. Used when the volume of data transferred during an interval is
important even if the latency over the link is high. You would typically mark the IP packets for
services with this priority with a ToS value of 3 or 4.
• Minimize-delay profile. Used when the time required (latency) for the packet to reach the
destination must be low. You would typically mark the IP packets for services with this
priority with a ToS value of 7.
4-34
Figure 4-3 on page
Figure 4-4 on page
Figure 4-6 on page
Figure 4-7 on page
v1.0, April 2010
4-13).
4-14).
4-16).
4-17).
Firewall Protection