Setting up QOS for VoIP on a UniFi Security Gateway

Activating the Smart Queue

UniFi Security Gateway offers a Smart Queue option based on Fair Queuing and Codel which prioritizes traffic and reduces delays when the router/bandwidth becomes overloaded. Activating this option will give priority to all traffic coming in and out of Aircall over other applications on the network.

However, please note that activating the Smart Queue may reduce the maximum throughput. It is then strongly recommended to monitor the available speed with and without Smart QoS enabled.

• Go to your UniFi controller and select the Settings
• Select Networks in the blue tab

• In your network list, select the WAN network that you will be using for your VoIP service
• Scroll down to the Common Settings section and click on enable smart queues

• Perform the speed test build into the UniFi interface by selecting pre-populate (or by using any other speed test)
• Click on Enable Smart Queues and the fields "Up Rate" and "Down Rate" will appear. Click on Pre-populate to automatically set 80% of the Up and Down bandwidth.
• Click Save *Please note that this may restart your USG so we recommend that you perform this outside of business hours.

The QoS is now configured on the Security Gateway.

Opening Ports

In order to make sure that traffic won't be blocked at the port level its necessary to open a specific set of ports:

Access your UniFi dashboard and navigate to Settings > Routing & Firewall > Firewall > LAN IN

Click on "+ Create a new rule" and set the settings to:

• Enabled: On
• Before predefined rules
• Action: Accept
• Protocol: TCP and UDP
• Leave the default settings in Advanced
• Source type: Address/port Group

Address group: create a new group named VoIP with the type being Address and add the list of corresponding IPs to your VoIP Provider.  

Port group: create a new group named VoIP_port and select Port in the Type option. Add the following ports

• TCP: 443, 5349, 10194
• UDP & TCP : 3478 + from 10000 to 20000

• Destination type: Address/port group
  • Address group: VoIP
  • Port group: VoIP_port

Finally, make sure to save these settings.

UniFi Access Points and Switches

By default, The UniFi access points and switches will automatically maps DSCP value to Wi-Fi Multimedia (WMM) priority. Voice is then automatically given highest priority on these devices on no further changes are needed.