01/14/19 20:39 PM  

Create a QoS Policy for Palo Alto PA-200 | RingCentral

« Go Back

Article

 
SummaryThis article lists the steps and prerequisites to create a QoS Policy for Palo Alto PA-200.
Details

How to create a QoS Policy for Palo Alto PA-200


Before creating a QoS Policy, you must configure the following:

1. Create a Service Group to include all ports relevant to RingCentral Services.
2. Create a Network Profile.
3. Disable Palo Alto Networks SIP Application-level Gateway (ALG) to avoid intermittent call connectivity issues (phone registration or call feature operation) or excessive voice quality impairments (increased latency and jitter).

 

Create a QoS Policy for Palo Alto PA-200

1. Go to Policies > QoS, and then click on the Add button at the bottom of the screen. 

User-added image

2. Under the General tab create the following.

Name: Name your new policy “RC-Services”
Description should include all services that are included within the policy.

User-added image

3. Click the Source tab and set the Zones in which the Policy is to be applied.
Click the Add button.

User-added image

4. For the Source Zone, select L3-Trust. This will apply these rules to all traffic from inside the network passing through the Layer 3 Router/firewall WAN interface.

User-added image

5. Click the Destination tab and set the Zones in which the Policy is to be applied.
Click the Add button under the Destination Zone.

User-added image

6. The Destination Zone will be L3-Untrust. The Destination will be our RingCentral Supernets. L3-Untrust is to apply these rules to any traffic coming back through the firewall from these addresses.

User-added image

7. Click the Add button under the Destination Address, and then select Address Group. 

User-added image

8. Name your Address Group "RingCentral Supernets". Click the Add button, and then select New Address

User-added image

9. Add the *RingCentral Supernets one at a time, and then click OK
 
Name: let's use RC1 for example for the 1st supernet
Description: optional
Type: Set to IP Netmask, and then enter the *RingCentral Supernet on the field provided. 
*See RingCentral Supernets in RingCentral Network Requirements and Recommendations.

User-added image

For this example, we added all 7 of the RingCentral Supernets. Click OK

User-added image

10. Click the Application tab, and then click the Add button you to add the predefined “ringcentral” application which includes the standard ports and a description of services.

User-added image

11. Type "ringcentral" on the field provided to search for and choose the ringcentral application. Click ringcentral in the search results. 

User-added image

12. Click on the Service/URL Category tab, and then click the Add button. 

User-added image

13. Select the Service Group "RingCentral Services" from the list.

User-added image

14. Click on the DSCP/ToS tab, select Codepoints, and then click the Add button. 

User-added image

15. Add a New DSCP value Named “RC-Media Prioritization”.
Select Type: Expedited Forwarding (EF), and then click OK.

User-added image

16. Click the Other Settings tab and add the new BWM value. By choosing Class 1 you are choosing your newly created BWM value.

User-added image

17. Once completed you must click Commit at the top right of the screen.

User-added image

18. On the Commit confirmation screen, you have the option to preview the changes, view the summary of changes and validate the changes. To save the changes, click Commit

User-added image

User-added image

19. Click Close

User-added image
 
Ranking
Was this information helpful?
Yes
No
Somewhat

Tell us why and what can we do to improve this information