Under you can adjust the settings for your IP traffic. This approach involves more than just assigning Quality-of-Service values. Here you define traffic groups that are used to apply rules in various ways in your LANCOM R&S®Unified Firewall:
- Via a desktop connection: This applies to all of the encrypted tunnel traffic, not taking into account any individual types of traffic on the inside of the tunnel. The assignment to a group may be for the entire connection or only for individual rules of the connection.
- Via an IPsec tunnel: This concerns the encrypted data traffic sent through the tunnel, without accounting for the different types of unencrypted data in the tunnel.
- Via an app routing profile: This concerns the traffic for one of the applications set in the profile and for a desktop connection using this profile.
The groups can be used in rules to determine how the matching traffic should be prioritized, and what bandwidth limits and guarantees apply. For this purpose, these rules are collected for each interface in Shaping Configurations. A shaping configuration
- applies to a specific WAN interface or the internal traffic to a route-based IPsec tunnel,
- determines which bandwidths (upload/download) are available on the selected interface or the selected tunnel, and
- maintains a separate list of applicable shaping rules for uploads and downloads. For a traffic group, this is the priority, guaranteed bandwidth, and maximum bandwidth.
Wherever traffic can be assigned to a group (desktop connection, IPsec tunnel, or app routing profile), a DSCP value (Quality of Service) can optionally be specified for outbound packets. This gives an indication to other devices along the packet route (both inside and outside the LANCOM R&S®Unified Firewall network) how they should prioritize packets. If nothing is specified, the corresponding IP packet header with its original value remains unchanged.
