How to manage Zoom Mesh network policies

Zoom Mesh network policies provide administrators with granular control over how Zoom traffic flows through their organization's network infrastructure. These policies enable you to optimize audio and video quality through DSCP marking, control network traversal by setting maximum hop limits, and define trusted IP ranges for secure mesh networking. This guide walks you through configuring these essential network policies to ensure optimal performance and security for your Zoom Mesh deployment.

Requirements for using Zoom Mesh Network Policies

Table of Contents

How to set DSCP marking for Mesh audio and video traffic

Outbound audio/video media from devices in a Mesh network can be marked with the DSCP (Differentiated Services Code Point) tag, which allows network administrators to prioritize audio traffic for optimal quality of service. This marking helps ensure that audio packets receive appropriate priority treatment as they traverse the network infrastructure. Use the following steps to customize the DSCP value to align with your organization's network quality of service policies.

Set DSCP audio traffic priority marking

To set DSCP marking for Mesh audio traffic:

  1. Sign in to the Zoom web portal l as an admin with the privilege to edit account settings.
  2. In the top-right corner, click your profile picture or initials, then click Admin Center.
  3. In the side menu, click Product Configuration, then click Mesh.
  4. Click the drop-down button and select Zoom Mesh for Webinars.
  5. Click the Settings tab.
  6. Under the General Configuration section, scroll to Network policies for Mesh devices.
  7. Under Differentiated Services Code Point (DSCP) marking, click the Audio traffic priority marking checkbox.
  8. Set the value to an integer within the range of 0-63.
    Note: By default, the value will be 56.
  9. Click Save.

Set DSCP video traffic priority marking

To set DSCP marking for Mesh video traffic:

  1. Sign in to the Zoom web portal l as an admin with the privilege to edit account settings.
  2. In the top-right corner, click your profile picture or initials, then click Admin Center.
  3. In the side menu, click Product Configuration, then click Mesh.
  4. Click the drop-down button and select Zoom Mesh for Webinars.
  5. Click the Settings tab.
  6. Under the General Configuration section, scroll to Network policies for Mesh devices.
  7. Under Differentiated Services Code Point (DSCP) marking, click the Video traffic priority marking checkbox.
  8. Set the value to an integer within the range of 0-63.
    Note: By default, the value will be 40.
  9. Click Save.

How to set the maximum network hops between Mesh devices

The maximum network hops setting controls how far Zoom Mesh traffic can traverse across your network infrastructure. By default, this value is set to 10, which means mesh networking will only occur between devices that are within 10 Layer 3 network hops of each other. This limitation helps maintain optimal performance and reduces latency by preventing mesh connections across excessively distant network segments.

  1. Sign in to the Zoom web portal l as an admin with the privilege to edit account settings.
  2. In the top-right corner, click your profile picture or initials, then click Admin Center.
  3. In the side menu, click Product Configuration, then click Mesh.
  4. Click the drop-down button and select Zoom Mesh for Webinars.
  5. Click the Settings tab.
  6. Under the General Configuration section, scroll to Network policies for Mesh devices.
  7. Click the Maximum network hops between Mesh devices checkbox.
  8. Set the value to a value within the range of 2-10.
    Note: By default, the value will be 10.
  9. Click Save.

How to set trusted public IP ranges

To define trusted public IP ranges, provide a comma-separated list of IPv4 CIDR ranges representing the internal addresses of participating Zoom clients (not their NAT addresses). Devices with IP addresses outside these ranges will not listen for child connections. Accepted formats include CIDR notation (e.g., 203.0.113.0/24), IP ranges (e.g., 198.51.100.10-198.51.100.120), or a combination of both (e.g., 198.51.100.10-198.51.100.120, 203.0.113.0/24).

Note: By default, 10.0.0.0/24, 172.16.0.0/16, and 192.168.0.0/16 are trusted and do not need to be specified.

  1. Sign in to the Zoom web portal l as an admin with the privilege to edit account settings.
  2. In the top-right corner, click your profile picture or initials, then click Admin Center.
  3. In the side menu, click Product Configuration, then click Mesh.
  4. Click the drop-down button and select Zoom Mesh for Webinars.
  5. Click the Settings tab.
  6. Under the General Configuration section, scroll to Network policies for Mesh devices.
  7. Click the Trusted public IP ranges checkbox.
  8. Enter the desired IP ranges, separating each range with a comma.
  9. Click Save.