AT&T Office@Hand

Learn how to use features from AT&T Office@Hand. Access our self-help options to set up and use this application to communicate with customers.

Back to product page

Network – Configure Dell SonicWALL SOHO Router | AT&T Office@Hand
Article #5550

The Dell SonicWALL SOHO router can be configured to open ports, prioritize voice traffic and set minimum bandwidth for the AT&T Office@Hand VoIP service. Follow the instructions below to configure your SonicWALL firewall.

Network – Configure Dell SonicWALL SOHO Router

Based on available ISP bandwidth of 10Mbps/10Mbps (download/upload); accounting for 10 concurrent calls, adjust your numbers accordingly. One call requires approximately 90Kbps download/upload. 100Kbps was used in the example below for ease of calculation.

The router can be optimized by accessing the following:

  1. Access the firewall’s interface
    1. Enter the firewall’s IP address in the address bar of your web browser. To check your firewall’s IP address, refer to your firewall’s documentation or contact the manufacturer for support.
    2. Enter the firewall’s username and password. Click OK. The default username and password is admin.
  2. Access the VoIP Settings
    1. Go to VoIP > Settings.
    2. Put a check on Enable Consistent NAT.
    3. Disable/uncheck Sip Transformations. This will disable SIP ALG.
    4. Click Accept to save the settings.
  3. Access the Firewall Settings
    1. Go to Firewall Settings > BWM.
    2. Under Bandwidth Management Type, select Global.
    3. Under Priority, disable EVERY category, except Medium.

      Set Medium values to:
      Guaranteed : 30%
      Maximum / Burst: 50%

      Enable Realtime and set values to:
      Guaranteed : 70%
      Maximum / Burst: 100%

    4. Click Accept to save the settings.
  4. Access the Network Settings
    1. Go to Network > Interfaces > X1 (WAN)
    2. Under the General tab, click the Configure icon (on far right).
    3. Go to Advance > Link Speed, and then set to Auto Negotiate (UNLESS there’s a need to set it to something specific).
    4. Under Bandwidth Management set the following:
      • Check the checkbox next to Enable Egress, and set Interface Egress Bandwidth to match the available bandwidth.
      • Check the checkbox next to Enable Ingress, and set Interface Ingress Bandwidth to match the available bandwidth.
    5. Click OK to save the settings.
    6. Under Network on the left side of the page, go to Address Objects.
    7. Click Add under Address Objects.
      ———————————–
      Name: ATToHFullRange1
      Zone Assignment: WAN
      Type: Network
      Network: 199.255.120.0
      Netmask: 255.255.252.0
      Click Add
      ———————————–

      Name: ATToHFullRange2
      Zone Assignment: WAN
      Type: Network
      Network: 199.68.212.0
      Netmask: 255.255.252.0
      Click Add
      ———————————–

      Name: ATToHFullRange3
      Zone Assignment: WAN
      Type: Network
      Network: 104.245.56.0
      Netmask: 255.255.248.0
      Click Add
      ———————————–

      Name: ATToHFullRange4
      Zone Assignment: WAN
      Type: Network
      Network: 185.23.248.0
      Netmask: 255.255.252.0
      Click Add
      ———————————–

      Name: ATToHFullRange5
      Zone Assignment: WAN
      Type: Network
      Network: 103.44.68.0
      Netmask: 255.255.252.0
      Click Add
      ———————————–

      Name: ATToHFullRange6
      Zone Assignment: WAN
      Type: Network
      Network: 208.87.40.0
      Netmask: 255.255.252.0
      Click Add
      ———————————–

      Name: ATToHFullRange7
      Zone Assignment: WAN
      Type: Network
      Network: 192.209.24.0
      Netmask: 255.255.248.0
      Click Add
      ———————————–

      Name: ATToHFullRange8
      Zone Assignment: WAN
      Type: Network
      Network: 80.81.128.0
      Netmask: 255.255.240.0
      Click Add
      ———————————–
    8. Click Add Group. Name the group ATToHFullRNGGp and then add ATToHFullRange1, ATToHFullRange2, ATToHFullRange3, ATToHFullRange4, ATToHFullRange5, ATToHFullRange6, ATToHFullRange7 and ATToHFullRange8 to the Group. Use the arrows in the box to move the highlighted information from left to right, then click OK.
    9. Still under Network on the left side of the page, go to Services.
    10. Click Add under Services, and then add the following:
      ———————————-
      Name: ATToH1
      Protocol: UDP
      Port Range: 1000-65535
      Sub type: none Click Add
      ———————————–

      Name: ATToH2
      Protocol: TCP
      Port Range: 5060-6000
      Sub type: none
      Click Add
      ———————————–

      Name: ATToH3
      Protocol: TCP
      Port Range: 80-80
      Sub type: none
      Click Add
      ———————————-

      Name: ATToH4
      Protocol: TCP
      Port Range: 443-443
      Sub type: none
      Click Add
      ———————————-

      Name: ATToH5
      Protocol: UDP
      Port Range: 123-123
      Sub type: none
      Click Add
      ———————————–
    11. Still on Services under Service Groups, click Add Group, to add the services to a group. Name the group AT&T Office@Hand, and then highlight ATToH1 through ATToH5. Use the arrows in the box to move the highlighted information from left to right. Click OK.
  5. Access Rules
    1. On the left side of the page, go to Firewall > Access Rules.
    2. Click Add to add the rule for LAN-to-WAN and WAN-to-LAN.
      WAN > LAN LAN > WAN
      General tab General tab
      Action: Allow
      From Zone: WAN
      To Zone: LAN
      Service: AT&T Office@Hand
      Source: ATToHFullRNGGrp
      Destination: Any
      Users Allowed: All
      Schedule: Always on
      Check Enable Logging
      Check Allow Fragmented Packets
      Click Add
      Action: Allow
      From Zone: LAN
      To Zone: WAN
      Service: AT&T Office@Hand
      Source: Any
      Destination: ATToHFullRNGGrp
      Users Allowed: All
      Schedule: Always on
      Check Enable Logging
      Check Allow Fragmented Packets
      Click Add
    3. Click the edit button Edit button on both the LAN-to-WAN and WAN-to-LAN settings for ATToHFullRNGGrp, and go to the Ethernet BWM tab.
      Ethernet Bandwidth Management

      • Check the box next to Enable Outbound Bandwidth Management, and set the Bandwidth Priority to Realtime.
      • Check the box next to Enable Inbound Bandwidth Management, and set the Bandwidth Priority to Realtime.
    4. Go to the QoS tab.
      DSCP Marking Settings

      • DSCP Marking Action: Explicit
      • Explicit DSCP Value: 46 – Expedited Forwarding (EF)
    5. Click OK to save.

Keywords: sonicwall, firewall, router, configuration, 5550