Netgear SRX5308 SRX5308 Reference Manual - Page 124

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual 3. Click Apply to save your changes. The modified service is displayed in the Custom Services Table. Creating Quality of Service (QoS) Profiles A Quality of Service (QoS) profile defines the relative priority of an IP packet when multiple connections are scheduled for simultaneous transmission on the VPN firewall. A QoS profile becomes active only when it is associated with a nonblocking inbound or outbound firewall rule and traffic matching the firewall rule flows through the router. After you have created a QoS profile, you can assign the QoS profile to firewall rules on the following screens: • Add LAN WAN Outbound Services screen (see Figure 4-3 on page 4-13). • Add LAN WAN Inbound Services screen (see Figure 4-4 on page 4-14). • Add DMZ WAN Outbound Services screen (see Figure 4-6 on page 4-16). • Add DMZ WAN Inbound Services screen (see Figure 4-7 on page 4-17). Priorities are defined by the "Type of Service (ToS) in the Internet Protocol Suite" standards, RFC 1349. There is no default QoS profile on the VPN firewall. Following are examples of QoS profiles that you could create: • Normal service profile. Used when no special priority is given to the traffic. You would typically mark the IP packets for services with this priority with a ToS value of 0. • Minimize-cost profile. Used when data must be transferred over a link that has a lower "cost." You would typically mark the IP packets for services with this priority with a ToS value of 1. • Maximize-reliability profile. Used when data must travel to the destination over a reliable link and with little or no retransmission. You would typically mark the IP packets for services with this priority with a ToS value of 2. • Maximize-throughput profile. Used when the volume of data transferred during an interval is important even if the latency over the link is high. You would typically mark the IP packets for services with this priority with a ToS value of 3 or 4. • Minimize-delay profile. Used when the time required (latency) for the packet to reach the destination must be low. You would typically mark the IP packets for services with this priority with a ToS value of 7. 4-34 v1.0, April 2010 Firewall Protection