camber

well this may have just become a QOS for gxp2000/asterisk thread, but for those interested, I finally got DiffServ working on outbound SIP/RTP related packets from my trixbox/asterisk box. The wierd part, was I was having trouble getting the firewall to work at all. Every time i did a service iptables status, it would return "firewall stopped". Luckily I ran along the following: iptables Won't Start The iptables startup script expects to find the /etc/sysconfig/iptables before it starts. If none exists, then symptoms include the firewall status always being stopped and the /etc/init.d/iptables script running without the typical [OK] or [FAILED] messages. If you have just installed iptables and have never applied a policy, then you will face this problem. Unfortunately, running the service iptables save command before restarting won't help either. You have to create this file. [root@bigboy tmp]# service iptables start [root@bigboy tmp]# [root@bigboy tmp]# touch /etc/sysconfig/iptables [root@bigboy tmp]# chmod 600 /etc/sysconfig/iptables [root@bigboy tmp]# service iptables start Applying iptables firewall rules: [ OK ] [root@bigboy tmp]# from: http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch14_:_Linux_Firewalls_Using_iptables#iptables_Won.27t_Start And then i just added the following to my iptables firewall script: echo "Load rules for mangle table ..." $IPT -t mangle -A POSTROUTING -p udp --sport 5004:5082 -j DSCP --set-dscp-class EF $IPT -t mangle -A POSTROUTING -p udp --sport 10000:20000 -j DSCP --set-dscp-class EF Im still not 100% sure of those port ranges, but I think they cover SIP/RTP just fine. anyway, a tshark inspection of outbound traffic from my server to gxpphones and my VOIP service providers show the following: Frame 4 (552 bytes on wire, 552 bytes captured) Arrival Time: Oct 26, 2007 10:36:15.055755000 [Time delta from previous packet: 0.499513000 seconds] [Time since reference or first frame: 2.199214000 seconds] Frame Number: 4 Packet Length: 552 bytes Capture Length: 552 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip] Ethernet II, Src: AsustekC_, Dst: Cisco_3c) Destination: Cisco_3) Address: Cisco_3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: AsustekC_4) Address: AsustekC_4) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: [MY SERVER IP]( [MY SERVER IP]), Dst: [MY VOIP PROVIDER IP]([MY VOIP PROVIDER IP]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding; ECN: 0x00) 1011 10.. = Differentiated Services Codepoint: Expedited Forwarding (0x2e) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 538 Identification: 0x15a0 (5536) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x04df [correct] [Good: True] hooray.

well, i seem to have gotten diffserv to work. I set the value to 46 ( not the 48 that it defaults to), and using tshark, it reported the following for voice traffic packets coming from my gxp2000 GNU nano 1.2.4 File: text Modified Header length: 20 bytes Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding; ECN: 0x00) 1011 10.. = Differentiated Services Codepoint: Expedited Forwarding (0x2e) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x00d6 (214) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: UDP (0x11) Header checksum: 0x5263 [correct] [Good: True] [bad : False] So .. I am using a netopia router that supoprted diffserv, and I am going to buy a new switch that supports it (our current one is waay old). So next I will just need to figure out how to get the internal asterisk server to send out the packets marked correctly as well, but there seems to be lots of info out there for that.

well it seems that i will give up on 802.1p priority value and try to set the diffserv value instead. From what I can tell it seems that diffserv includes a TOS when you set it. If someone out there can confirm/deny this, that would be awesome. However, it seems the gxp2000 default value is 48, but all of the references I can find say that expidited service flag for diffserv is 46 (decimal), so I will try that and hope it is all i need to make sure the voip packets are getting priority. (http://www.voip-info.org/wiki/view/DiffServ)

the server is on the lan as are the phones. I have tried setting the value on the lan, but i get the problem, so i tried to assign a public ip address to bypass my switch and go straight to the isp router. This also fails. so here is what i have tried: 0. dynamic ip address on phone, connected to switch which is connected to cisco t1 router .. priority value set to 0 .. Phone works fine. 1. dynamic ip address on phone, connected to switch which is connected to a cisco t1 router. priority value set to 6 ... result .. "starting network" (never gets on network) 2. static ip address on phone ( from switch pool .. (i.e. 10.0.x.x) ) switch is connect to the t1 router. priority value set to 6.. result .. "gets passed starting network, but never connects to asterisk server" (never gets on network) 3. Public IP address from T1 router. priority value set to 0 .. phone works fine. connects to asterisk server (also public ip address) 4. Public IP address from T1 router. priority value set to 6 .. result .. "gets passed starting network, but never connects to asterisk server" (never gets on network) 5. static Public IP address from Netopia DSL router (different ISP then the T1) priority value set to 6 .. result .. "gets passed starting network, but never connects to asterisk server" (never gets on network) 6. dynamic ip address from dlink router connected to netopia dsl router (different ISP then the T1) priority value set to 6 .. result .. ""STARTING NETWORK" (never gets on network) so, as you can see i dont really have a clue about networks, but i can try stuff. and nothing has worked with either isp, so I am at a loss at this point.

its asterisk via trixbox. I have tried it on a netgear switch and a dlink router, and a netopia dsl router and got the same results. interesting on the netopia router, i assigned a static ip to the phone, and it appeard to get past the "starting network" screen, but alas, it no longer connected to the trixbox server after i set the TOS to 6. so, i dont think its a switch.router issue, but perhaps its with my isp? maybe they dont support it. I will try to call them.

yes, it said 1.1.5.3 im still having the issue. I think perhaps my router doesnt support the protocol perhaps?

thanks for the reply. I have been trying to set it to 6 or perhaps i will use 5. I understand that 5 is usually for voice traffic if the reference stuff i have found it right. I have tried this with many version of the firmware where i set it via the web interface including 1.1.4.14 and 1.1.4.18 and the beta 1.1.5.3 I will try again via cfg file using the firmward version you linked to. camber

hi there, were you able to actually set a P87 value for 802.1p priority value? any time i set it to other then 0, the phone restarts and just sits there saying "STARTING NETWORK" I think have to factory reset and start over. any ideas?