Objective

Applies To

• Watchguard Firebox T70. Tested version 12.3.B581846

Procedure

The purpose of this article is to provide a sample configuration. At the time of article creation, this device was in a known working state on the firmware used.  Keep in mind different firmware versions will interact with hosted VoIP services in different ways. While this device may be fully functional on the tested and/or current firmware version, it is possible newer revisions will cause disruptions in service or make a device fully compliant with the required settings for hosted VoIP services where it was previously not.

Add 8x8 Servers

1. Go to Firewall and then to Aliases in the sub menu.
2. When creating new Aliases fill in Name as 8x8 and Description as 8x8 Servers.
3. Click Add under Alias Members.
   
   
   
4. As Member type select Network IPv4
5. Add all 8x8 subnets listed in the X Series Technical Requirements
6. After all 8x8 servers have been added, click Save.
   
   
   
   

Create Policy for 8x8

1. Go to Firewall then to Firewall Policies and click Add.
2. In the Packet Filter drop down choose Any, then click Add Policy.
   
   
   
3. In the From box click Add and select Any Trusted.
4. In the To box click Add and select 8x8.
5. Check the box next to Specify custom idle timeout and set to the timeout to 300 seconds. This helps to prevent dropped calls.
   
   
   
6. Go to the Advanced tab.
7. Select the options below to enable the following in the NAT section:
   • 1-to-1 NAT (Use Network NAT Settings)
   • Dynamic NAT
   • Select Use Network NAT Settings
8. Click the checkbox next to Override Per-Interface Settings.
9. Set the following values for QoS:
   • Marking Type: DSCP
   • Marking Method: Preserve
   • Prioritize Traffic Based on: Custom Value
   • Value: 7 (Highest)
10. Click Save.