[ previous ] [ next ] [ threads ]
 From:  "kjetilla" <kjetil underscore larsen at broadpark dot no>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Traffic shaping ViOP over a IPsec link
 Date:  Mon, 27 Sep 2004 21:19:28 +0200
My scenario:


Using m0n0 1.1 CD/Floppy on two standard PC :


VoIPgateway ---- Lan1 --- m0n01 ---- internet ---- m0n02 ----Lan2 ----- VoIP
Phones ( 10 pcs)


IPsec is used to connect lan1 with lan2. Working perfect!

Traffic shaping is enabled and setup was done using the wizard. 

It is working very well when traffic is coming to/from the internet. VoIP
quality is very good.


But when traffic is coming thru the IPsec channel between the two m0n0's
VoIP quality drops to unacceptable level and becomes unusable.


Is ViOP traffic wrapped into ESP before the traffic shaper starts processing
and therefore it cannot differenced between any combos of ports / source
/target IP's within the ESP package?


I've tried to use traffic shape rules on LAN side instead of WAN, without
any luck, but I might overlooked something..


Is there any way to get this to work? Any suggestions are welcomed.



Thanks, Kjetil