# Network Configuration

Due to Zoom Phone's cloud-based architecture, configuring Zoom Phone for your network is substantially easier in comparison to legacy, on-premises phone systems. From the simplest of perspectives, users need two key factors to begin successful calling: a working internet connection and open network ports. So long as users can successfully maintain an active connection with Zoom Phone data centers and the necessary ports are not blocked, Zoom Phone is ready for use within your network.

However, despite the fundamental simplicity, there are additional networking components to consider as customer environments become increasingly complex.

### Firewall

For a list of firewall ports, protocols, and settings, refer to [Zoom's support center](https://support.zoom.com/hc/en/article?id=zm_kb\&sysparm_article=KB0060548).

For customers using zero-touch provisioning, also refer to the [Poly](https://info.ztp.poly.com/docs/begin/prerequisites) and [Yealink](https://support.yealink.com/en/portal/knowledge/show?id=035c46eea77827eb20d53a4d) support sites to confirm your devices can communicate with the manufacturer's provisioning servers.

### Network Segments

When planning your Zoom Phone environment, be sure to confirm all network segments (e.g., load balancers, firewalls, custom VLANs, etc.) have sufficient network access as defined in our [firewall documentation](https://support.zoom.com/hc/en/article?id=zm_kb\&sysparm_article=KB0060548). Failure to grant necessary connectivity from network segments may impact the user, provisioning, or general Zoom Phone experience.

### Quality of Service (QoS)

For Quality of Service (QoS) configurations, Zoom supports two approaches for DSCP tagging: Zoom's built-in application-layer DSCP marking and manual DSCP marking.

#### Zoom's Application-Layer DSCP Marking

Customers can enable Zoom's built-in DSCP marking feature from the Zoom web portal. Once enabled, Zoom Workplace desktop, mobile, and Zoom Rooms apps (version 6.0+), and most Zoom-certified Cisco, Yealink, and Poly IP phones will transmit Zoom Phone audio packets with configured DSCP markings at the application-layer.

Refer to Zoom’s support center for more information on [using QoS DSCP markings](https://support.zoom.com/hc/en/article?id=zm_kb\&sysparm_article=KB0076320).

### Manual DSCP Markings

For customers using manual DSCP markings, Zoom recommends the following settings, depending on your organization's QoS strategy.

**4-Queue QoS Strategy:**

| Type                                  | DSCP Name | DSCP Value |
| ------------------------------------- | --------- | ---------- |
| Real-Time Flows                       | EF        | 46         |
| Transactional / Mission-Critical Data | AF41      | 26         |
| Signaling (for Real-Time Flows)       | CS3       | 24         |
| Best Effort                           | DF        | 0          |

**12-Queue QoS Strategy:**

| Type                                  | DSCP Name | DSCP Value |
| ------------------------------------- | --------- | ---------- |
| Network Control                       | CS6       | 48         |
| Real-Time Telephony                   | EF        | 46         |
| Broadcast Video                       | CS5       | 40         |
| Multimedia Conferencing               | AF41      | 34         |
| Real-Time Interactive                 | CS4       | 32         |
| Multimedia Streaming                  | AF31      | 26         |
| Signaling (for Real-Time Flows)       | CS3       | 24         |
| Transactional / Mission-Critical Data | AF21      | 18         |
| Management / OAM Traffic              | CS2       | 16         |
| Bulk Data                             | AF11      | 10         |
| Scavenger Class                       | CS1       | 8          |
| Best Effort                           | DF        | 0          |

### Virtual Private Networks (VPNs)

Zoom Phone is supported over a Virtual Private Network (VPN) connection; however, it is important to note that these connections can reduce call quality, extend latency time, and significantly impact your VPN's bandwidth utilization.

{% hint style="success" %}
**Zoom Recommendation**

For the best user experience and call quality, split tunnel all Zoom-related traffic **outside** your company's VPN. Failure to split-tunnel traffic may overwhelm your VPN's bandwidth and impact the user experience.
{% endhint %}

### DHCP Options

DHCP options 66 and 161, if enabled, can interfere with [zero-touch provisioning](/zoom-workplace/zoom-phone/zoom-phone-bluepaper/admin-experience.md#zero-touch-provisioning) (ZTP) on some devices. Customers are encouraged to leave these options unconfigured if using ZTP extensively, or if using multiple phone device manufacturers within the network.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://library.zoom.com/zoom-workplace/zoom-phone/zoom-phone-bluepaper/overview/network-configuration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.