


LABEL | Description |
|---|---|
QoS | Click this switch to enable QoS to improve your network performance. |
WAN Managed Upstream Bandwidth | Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using QoS. The recommendation is to set this speed to match the interfaces’ actual transmission speed. For example, set the WAN interfaces’ speed to 100000 kbps if your Internet connection has an upstream transmission speed of 100 Mbps. You can also set this number lower than the interfaces’ actual transmission speed. This will cause the Zyxel Device to not use some of the interfaces’ available bandwidth. If you leave this field blank, the Zyxel Device automatically sets this number to be 95% of the WAN interfaces’ actual upstream transmission speed. |
Upstream Traffic Priority Assigned by | Select how the Zyxel Device assigns priorities to various upstream traffic flows. • None: Disables auto priority mapping and has the Zyxel Device put packets into the queues according to your classification rules. Traffic which does not match any of the classification rules is mapped into the default queue with the lowest priority. • Ethernet Priority: Automatically assign priority based on the IEEE 802.1p priority level. • IP Precedence: Automatically assign priority based on the first three bits of the TOS field in the IP header. • Packet Length: Automatically assign priority based on the packet size. Smaller packets get higher priority since control, signaling, VoIP, Internet gaming, or other real-time packets are usually small while larger packets are usually best effort data packets like file transfers. |
Cancel | Click Cancel to restore your previously saved settings. |
Apply | Click Apply to save your changes. |

LABEL | Description |
|---|---|
Add New Queue | Click this to create a new queue entry. |

LABEL | Description |
|---|---|
Active | Click this switch to enable the queue. |
Name | Enter a descriptive name for this queue. You can use up to 32 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. |
Interface | Select the interface to which this queue is applied. This field is read-only if you are editing the queue. |
Priority | Select the priority level (from 1 to 8) of this queue. The smaller the number, the higher the priority level. Traffic assigned to higher priority queues gets through faster while traffic in lower priority queues is dropped if the network is congested. |
Weight | Select the weight (from 1 to 8) of this queue. If two queues have the same priority level, the Zyxel Device divides the bandwidth across the queues according to their weights. Queues with larger weights get more bandwidth than queues with smaller weights. |
Buffer Management | This field displays Drop Tail (DT). Drop Tail (DT) is a simple queue management algorithm that allows the Zyxel Device buffer to accept as many packets as it can until it is full. Once the buffer is full, new packets that arrive are dropped until there is space in the buffer again (packets are transmitted out of it). |
Rate Limit | Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. If you enter 0 here, this means there's no rate limit on this queue. |
Cancel | Click Cancel to exit this screen without saving. |
OK | Click OK to save your changes. |

LABEL | Description |
|---|---|
Add New Classification | Click this to create a new classifier. |
Order | This is the index number of the entry. The classifiers are applied in order of their numbering. |
Status | This field displays whether the classifier is active or not. A yellow bulb signifies that this classifier is active. A gray bulb signifies that this classifier is not active. |
Class Name | This is the name of the classifier. |
Classification Criteria | This shows criteria specified in this classifier, for example the interface from which traffic of this class should come and the source MAC address of traffic that matches this classifier. |
DSCP Mark | This is the DSCP number added to traffic of this classifier. |
802.1P Mark | This is the IEEE 802.1p priority level assigned to traffic of this classifier. |
VLAN ID Tag | This is the VLAN ID number assigned to traffic of this classifier. |
To Queue | This is the name of the queue in which traffic of this classifier is put. |
Modify | Click the Edit icon to edit the classifier. Click the Delete icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. |





LABEL | Description |
|---|---|
Step1: Class Configuration | |
Active | Click this switch to enable the classifier. |
Class Name | Enter a descriptive name for this class. You can use up to 32 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. |
Classification Order | Select an existing number for where you want to put this classifier to move the classifier to the number you selected after clicking Apply. Select Last to put this rule in the back of the classifier list. |
Step2: Criteria Configuration | |
Basic | |
From Interface | If you want to classify the traffic by an ingress interface, select an interface from the From Interface drop-down list box. |
Ether Type | Select a predefined application to configure a class for the matched traffic. Traffic will be classified with the Ether Type of Ethernet frames. Ether Type is a field in an Ethernet frame used to identify the protocol encapsulated in the frame. Select NA to specify traffic that does not belong to any Ether type. If you select IP, you also need to configure source or destination, IP address, DHCP options, DSCP value or the protocol type. If you select IPv6, you also need to configure source or destination, IPv6 address, DSCP value or the protocol type. If you select 802.1Q, you can configure an 802.1p priority level. |
Source | |
Address | Select the checkbox and enter the source IP address in dotted decimal notation. A blank source IP address means any source IP address. |
Subnet Mask | This field is available only when you select IP in the Ether Type field. Enter the source subnet mask. |
Prefix Length | This field is available only when you select IPV6 in the Ether Type field. Enter the source prefix length. |
Port Range | If you select TCP or UDP in the IP Protocol field, select the checkbox and enter the port numbers of the source. |
MAC | Select the checkbox and enter the source MAC address of the packet. |
MAC Mask | Enter the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match. Enter “0” for the bits of the matched traffic’s MAC address, which can be of any hexadecimal characters. For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. |
Exclude | Select this option to exclude the packets that match the specified criteria from this classifier. |
Destination | |
Address | Select the checkbox and enter the source IP address in dotted decimal notation. A blank source IP address means any source IP address. |
Subnet Mask | This field is available only when you select IP in the Ether Type field. Enter the source subnet mask. |
Prefix Length | This field is available only when you select IPV6 in the Ether Type field. Enter the source prefix length. See the IPv6 Appendix for more IPv6 information. |
Port Range | If you select TCP or UDP in the IP Protocol field, select the checkbox and enter the port numbers of the source. |
MAC | Select the checkbox and enter the source MAC address of the packet. |
MAC Mask | Enter the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match. Enter “0” for the bits of the matched traffic’s MAC address, which can be of any hexadecimal characters. For example, if you set the MAC address to 00:13:49:00:00:00 and the mask to ff:ff:ff:00:00:00, a packet with a MAC address of 00:13:49:12:34:56 matches this criteria. |
Exclude | Select this option to exclude the packets that match the specified criteria from this classifier. |
Others | |
Service | This field is available only when you select IP or IPv6 in the Ether Type field. This field simplifies classifier configuration by allowing you to select a predefined application. When you select a predefined application, you do not configure the rest of the filter fields. |
IP Protocol | This field is available only when you select IP or IPv6 in the Ether Type field. Select this option and select the protocol (service type) from TCP, UDP, ICMP or IGMP. If you select User defined, enter the protocol (service type) number. |
DHCP | This field is available only when you select IP in the Ether Type field. Select this option and select a DHCP option. If you select Vendor Class ID (DHCP Option 60), enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware. If you select Client ID (DHCP Option 61), enter the Identity Association IDentifier (IAD Option 61) of the matched traffic, such as the MAC address of the device. If you select User Class ID (DHCP Option 77), enter a string that identifies the user’s category or application type in the matched DHCP packets. If you select Vendor Specific Info (DHCP Option 125), enter the vendor specific information of the matched traffic, such as the product class, model name, and serial number of the device. |
IP Packet Length | This field is available only when you select IP in the Ether Type field. Select this option and enter the minimum and maximum packet length (from 46 to 1500) in the fields provided. |
DSCP | This field is available only when you select IP or IPv6 in the Ether Type field. Select this option and specify a DSCP (DiffServ Code Point) number between 0 and 63 in the field provided. |
802.1P | This field is available only when you select 802.1Q in the Ether Type field. Select this option and select a priority level (between 0 and 7) from the drop-down list box. "0" is the lowest priority level and "7" is the highest. |
VLAN ID | This field is available only when you select 802.1Q in the Ether Type field. Select this option and specify a VLAN ID number. |
TCP ACK | This field is available only when you select IP in the Ether Type field. If you select this option, the matched TCP packets must contain the ACK (Acknowledge) flag. |
Exclude | Select this option to exclude the packets that match the specified criteria from this classifier. |
Step3: Packet Modification | |
DSCP Mark | This field is available only when you select IP in the Ether Type field. If you select Remark, enter a DSCP value with which the Zyxel Device replaces the DSCP field in the packets. If you select Unchange, the Zyxel Device keep the DSCP field in the packets. |
VLAN ID Tag | If you select Remark, enter a VLAN ID number with which the Zyxel Device replaces the VLAN ID of the frames. If you select Remove, the Zyxel Device deletes the VLAN ID of the frames before forwarding them out. If you select Add, the Zyxel Device treat all matched traffic untagged and add a second VLAN ID. If you select Unchange, the Zyxel Device keep the VLAN ID in the packets. |
802.1P Mark | Select a priority level with which the Zyxel Device replaces the IEEE 802.1p priority field in the packets. If you select Unchange, the Zyxel Device keep the 802.1p priority field in the packets. |
Step4: Class Routing | |
Forward to Interface | Select a WAN interface through which traffic of this class will be forwarded out. If you select Unchange, the Zyxel Device forward traffic of this class according to the default routing table. |
Step5: Outgoing Queue Selection | |
To Queue Index | Select a queue that applies to this class. You should have configured a queue in the Queue Setup screen already. |
Cancel | Click Cancel to exit this screen without saving any changes. |
OK | Click OK to save your changes. |

LABEL | Description |
|---|---|
Add New Shaper | Click this to create a new entry. |
# | This is the index number of the entry. |
Status | This field displays whether the shaper is active or not. A yellow bulb signifies that this policer is active. A gray bulb signifies that this shaper is not active. |
Interface | This shows the name of the Zyxel Device's interface through which traffic in this shaper applies. |
Rate Limit | This shows the average rate limit of traffic bursts for this shaper. |
Modify | Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper. Note that subsequent rules move up by one when you take this action. |

LABEL | Description |
|---|---|
Active | Click this switch to enable the shaper. |
Interface | Select a Zyxel Device's interface through which traffic in this shaper applies. |
Rate Limit | Enter the average rate limit of traffic bursts for this shaper. |
Cancel | Click Cancel to exit this screen without saving any changes. |
OK | Click OK to save your changes. |

LABEL | Description |
|---|---|
Add New Policer | Click this to create a new entry. |
# | This is the index number of the entry. |
Status | This field displays whether the policer is active or not. A yellow bulb signifies that this policer is active. A gray bulb signifies that this policer is not active. |
Name | This field displays the descriptive name of this policer. |
Regulated Classes | This field displays the name of a QoS classifier. |
Meter Type | This field displays the type of QoS metering algorithm used in this policer. |
Rule | These are the rates and burst sizes against which the policer checks the traffic of the member QoS classes. |
Action | This shows how the policer has the Zyxel Device treat different types of traffic belonging to the policer’s member QoS classes. |
Modify | Click the Edit icon to edit the policer. Click the Delete icon to delete an existing policer. Note that subsequent rules move up by one when you take this action. |

LABEL | Description |
|---|---|
Active | Click this switch to enable the policer. |
Name | Enter a descriptive name for this policer. You can use up to 16 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. |
Meter Type | This shows the traffic metering algorithm used in this policer. The Simple Token Bucket algorithm uses tokens in a bucket to control when traffic can be transmitted. Each token represents one byte. The algorithm allows bursts of up to b bytes which is also the bucket size. The Single Rate Three Color Marker (srTCM) is based on the token bucket filter and identifies packets by comparing them to the Committed Information Rate (CIR), the Committed Burst Size (CBS) and the Excess Burst Size (EBS). The Two Rate Three Color Marker (trTCM) is based on the token bucket filter and identifies packets by comparing them to the Committed Information Rate (CIR) and the Peak Information Rate (PIR). |
Committed Rate | Specify the committed rate. When the incoming traffic rate of the member QoS classes is less than the committed rate, the device applies the conforming action to the traffic. |
Committed Burst Size | Specify the committed burst size for packet bursts. This must be equal to or less than the peak burst size (two rate three color) or excess burst size (single rate three color) if it is also configured. This is the maximum size of the (first) token bucket in a traffic metering algorithm. |
Excess Burst Size | Specify the additional amount of bytes that are admitted at the committed rate besides the committed burst size. This is the maximum size of the second token bucket in the srTCM. This field is only available when you select Single Rate Three Color in the Meter Type field. |
Peak Rate | Specify the maximum rate at which packets are admitted to the network. The peak rate should be greater than or equal to the committed rate. This is to specify how many bytes of tokens are added to the second bucket every second in the trTCM. This field is only available when you select Two Rate Three Color in the Meter Type field. |
Peak Burst Size | Specify the maximum amount of bytes that are admitted at the committed rate. This is the maximum size of the second token bucket in the trTCM. This field is only available when you select Two Rate Three Color in the Meter Type field. |
Conforming Action | Specify what the Zyxel Device does for packets within the committed rate and burst size (green-marked packets). • Pass: Send the packets without modification. • DSCP Mark: Change the DSCP mark value of the packets. Enter the DSCP mark value to use. |
Partial Conforming Action | Specify the action that the Zyxel Device takes on yellow-marked packets. Select Pass to forward the packets. Select Drop to discard the packets. Select DSCP Mark to assign a specified DSCP number (between 0 and 63) to the packets and forward them. The packets are dropped if there is congestion on the network. This field is only available when you select Single/Two Rate Three Color in the Meter Type field. |
Non-Conforming Action | Specify what the Zyxel Device does for packets that exceed the excess burst size or peak rate and burst size (red-marked packets). • Drop: Discard the packets. • DSCP Mark: Change the DSCP mark value of the packets. Enter the DSCP mark value to use. The packets may be dropped if there is congestion on the network. |
Regulated Classes Member Setting | |
Available Class Selected Class | Select a QoS classifier to apply this QoS policer to traffic that matches the QoS classifier. Highlight a QoS classifier in the Available Class box and use the > button to move it to the Selected Class box. To remove a QoS classifier from the Selected Class box, select it and use the < button. |
Cancel | Click Cancel to exit this screen without saving any changes. |
OK | Click OK to save your changes. |
Priority Level | Traffic Type |
|---|---|
Level 7 | Typically used for network control traffic such as router configuration messages. |
Level 6 | Typically used for voice traffic that is especially sensitive to jitter (jitter is the variations in delay). |
Level 5 | Typically used for video that consumes high bandwidth and is sensitive to jitter. |
Level 4 | Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network Architecture) transactions. |
Level 3 | Typically used for “excellent effort” or better than best effort and would include important business traffic that can tolerate some delay. |
Level 2 | This is for “spare bandwidth”. |
Level 1 | This is typically used for non-critical “background” traffic such as bulk transfers that are allowed but that should not affect other applications and users. |
Level 0 | Typically used for best-effort traffic. |
DSCP (6 bits) | Unused (2 bits) |
Priority Queue | Layer 2 | Layer 3 | ||
|---|---|---|---|---|
IEEE 802.1p User Priority (Ethernet Priority) | ToS (IP Precedence) | DSCP | IP Packet Length (Byte) | |
0 | 1 | 0 | 000000 | |
1 | 2 | |||
2 | 0 | 0 | 000000 | >1100 |
3 | 3 | 1 | 001110 001100 001010 001000 | 250 – 1100 |
4 | 4 | 2 | 010110 010100 010010 010000 | |
5 | 5 | 3 | 011110 011100 011010 011000 | <250 |
6 | 6 | 4 | 100110 100100 100010 100000 | |
5 | 101110 101000 | |||
7 | 7 | 6 | 110000 111000 | |
7 | ||||