Messages

1

15.7 Legacy Series / Re: [SOLVED] Traffic Shaper for VoIP?

« on: August 07, 2017, 01:59:03 pm »

Probably not "the best way".  This is not my area of expertise.   It has functioned with some success for the past almost two years.  We have very limited bandwidth due to location and cost, but we have a fairly large campus of people, all trying to do streaming video, music, etc... and then of course things like Windows Updates.  This shaping has certainly helped, but there are times when even the shaping can't keep the rest of the traffic at bay.

2

General Discussion / Re: [SOLVED] FreeRADIUS?

« on: December 22, 2015, 06:43:05 pm »

Sorry for the delay here.  I was finally able to get back to this location and upgraded OPNSense / installed freeradius3.  It's been running for a week or so and appears to be working great. 

I know you said no thanks needed, but again I do greatly appreciate it. 

3

General Discussion / Re: [SOLVED] FreeRADIUS?

« on: September 14, 2015, 03:00:40 pm »

Great, I look forward to testing it out.  Thank you so much!

4

15.7 Legacy Series / Re: Traffic Shaper for VoIP?

« on: September 02, 2015, 08:58:57 pm »

I think that may have done it!!!  I just implemented this, then did some large downloading while making calls, and the few calls I did sounded so much better... the choppiness was almost gone.  During the worst parts when the pipe was full there was a small bit of choppiness, but it was noted it was so much better than it would have been previously if the pipe were even barely in use.

I've only done a few calls, but like I said, I've filled the pipe (verified with the traffic graph while doing so, while on the call to boot), so I'm really hoping it's good.  As time goes on I'll get more input on call quality from my people. 

Basically, I did what Ad said above.  Roughly, the steps are (hopefully I'm not missing anything major here, as I'm retracing my steps):
- On my OPNSense 15.7 WebGUI:
- Went into Firewall -> Traffic Shaper, then clicked on the Pipes (if not already there)
- Added a pipe for the total size of my pipe - put value in bandwidth field, like 3 for 3Mb, then changed bandwidth metric to Mbit/sec, in description put in Main Pipe, didn't change/set nothing else, clicked Save Changes.
- Clicked Apply
- Clicked on Queues tab near the top
- Added 3 queues.  I may only ended up using two in my rules, but may revisit this. 
- All queues are associated with the Main Pipe I just created.  The first one I put in a weight of 100, and in the description I put HIGH priority, no Mask or anything else.  The second one I put in a weight of 25, and in the description I put Regular priority, no Mask or anything else.  The last one I put in a weight of 10 and put in a description of Low priority, no Mask or anything else.  Saved each one and then Apply when done with all.
- NOTE:  I chose these weights purely arbitrarily. Others here with more knowledge may have much more valuable input than I.
- Then I clicked on the Rules tab near the top
- Here I created two rules.  The first one I set the sequence to 1, hoping that would ensure it always would get evaluated the soonest.   I changed dst-port to 4569 since I'm using IAX2.  If you're using SIP or something else, you need to change this accordingly.  In target I associated it with the HIGH Priority queue.  In description I put VoIP.
- The second rule I left the sequence at 11, which is what it put in by default.  I left everything else alone except I associated it with the Regular Priority queue, and in the description I put Regular Traffic. 
- Save each and then Apply.

That's it.  Test and pray.

My thought process was that with the rules since IAX uses just the one port, 4569, it will get caught with the first rule and put into the HIGH priority queue.  The other rule, since it's sequence number is higher (11 vs 1) gets evaluated after the VoIP rule, catches basically all the rest of the traffic, and gets put into the Regular Priority queue.

Again, no idea if this is at all proper or correct, but it's what I did, and a short bit of testing provided some positive results.  Time will tell if it's good or not.  Hopefully I'll come back with good news.  Or at least some tweaks.  I'd be happy to receive any feedback, good or bad.   

I think this would also make for a great wiki page to complement the current Traffic Shaper page, with a focus on VoIP.  But I'm not going to touch that until I find that this actually works for a bit, and get some feedback on whether or not my reasoning is solid here.

Anyway, thanks Ad for the help, and thanks to all involved with the OPNSense project!

5

General Discussion / Re: FreeRADIUS?

« on: September 01, 2015, 09:55:33 pm »

Uh oh, my BSD noobness is going to show here 

Currently I've just got the one OPNSense machine, and it's in a production firewall/router setting.  So I'm not going to do this on that machine.  I don't have another BSD machine to do this on.  I could set up a VM, that would probably be a good learning experience, but I'll need to do that at a different time.

I did quickly try to download the source straight from the FreeRADIUS site and compile that.  I just did a "./compile" and it bombed on "configure: error: GNU Make is not installed.".  So now I know I'm in unfamiliar territory.  I'm completely unfamiliar with the BSD packaging system and "ports".   

Anyway, to solve my immediate needs I'll get FreeRADIUS running on another machine.  That'll give me time to figure this out later and/or wait for the official version. 

Thanks again for the super quick replies and the helpful information!  Take care.

6

General Discussion / Re: FreeRADIUS?

« on: September 01, 2015, 09:34:23 pm »

OK.  So if I want to get FreeRADIUS on my server sooner rather than later, I need to compile from source then, is that my best option?

7

15.7 Legacy Series / Re: Traffic Shaper for VoIP?

« on: September 01, 2015, 09:26:54 pm »

Thank you, I'll check this out.  I tried to follow what is listed on this page in the wiki:

https://wiki.opnsense.org/index.php/Traffic_shaper

But I see that just limits per session bandwidth.   Maybe the queue part is what I couldn't figure out. 

8

15.7 Legacy Series / Re: Traffic Shaper for VoIP?

« on: September 01, 2015, 09:13:52 pm »

Were you ever able to figure this out?  I would be very interested in the results.  One of the reasons I installed OPNSense was to help with this same issue at one of my locations...

I'm using Asterisk IAX2 on port 4569 and I'd love to be able to tell the system to prioritize this traffic above ALL else.

9

General Discussion / [SOLVED] FreeRADIUS?

« on: September 01, 2015, 09:06:27 pm »

Hello all.  Firstly let me say THANKS to all involved with, and for, this project.  It was so very easy to install via USB with two NICs and get up and running.  I come from Linux, having never used BSD. 

I was hoping to get FreeRADIUS installed on my OPNSense server, but I can't figure it out.  In the forum here I see it's been suggested as a future TODO item as a plug-in and whatnot.  Is there a way to just install the current package for BSD?  I apologize for the newbie question, but as I said, this is my first experience with BSD.    I have had a working FreeRADIUS setup running on Linux beforehand, but I reloaded that machine with OPNSense.  So I personally don't need the GUI settings, I just need to be able to get the package installed.

I tried "pkg install freeradius" to no avail.  I did note on a forum message from a few days ago that someone mentioned the package may need to be made available, possibly in the repository?  Can this be done?

https://forum.opnsense.org/index.php?topic=1312.msg3753#msg3753

I didn't just want to go and do the make from source deal as I assume someone has already done the legwork for this version of BSD and has patches and whatnot that I may miss.

For the record I'm using 15.7 on amd64.