priority settings do not work in both directions with Nets..

Archived from groups: comp.security.firewalls (More info?)

Hello all,

i have a VoIP device (VT1000) behind the Netscreen 5XP. To ensure
higher priority for VoIP traffic, i created a trust->untrust policy
(set policy id 2 name "voip" from "Trust" to "Untrust" "VT1000" "Any"
"ANY" Permit log traffic gbw 100 priority 0 mbw 2000) and for the rest
of the traffic I set a lower priority (set policy id 0 name "internet
access" from "Trust" to "Untrust" "Any" "Any" "ANY" Permit traffic
gbw 500 priority 6 mbw 2000 dscp enable).

Unfortunately, it appears that the priority settings does not have
affect on incomming traffic. When i surf the web, i still notice that
the party on the other side of the line is cutting off every few
words.

Is it possible that policy id 2 (above) only affects the outgoing
traffic and not the incoming traffic? I also tried adding this policy
(set policy id 1 name "VOIP" from "Untrust" to "Trust" "Any"
"MIP(55.126.042.43)" "ANY" Permit log traffic gbw 100 priority 0 mbw
2000), but wihtout much success.

How can i fix this?


thanks
Alon