Network Firewall Configuration - Revision history

Webmaster: /* Default Ports */

2012-06-28T17:42:36Z

Default Ports

← Older revision		Revision as of 17:42, 28 June 2012
Line 17:		Line 17:
	This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.		This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.

-	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the External IP Address '''externip''' value of your SIP General Settings is set to your PUBLIC IP address.	+	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the External IP Address '''externip''' value of your SIP General Settings is set to your PUBLIC IP address and that you define '''localnet''' parameter to include your VoIP LAN.
		+
		+	Example:
		+
		+	externip = 96.36.113.110
		+	localnet = 192.168.33.0/255.255.255.0

	=== IAX2 Protocol ===		=== IAX2 Protocol ===

Webmaster: /* Default Ports */

2011-07-11T15:35:45Z

Default Ports

← Older revision		Revision as of 15:35, 11 July 2011
Line 13:		Line 13:
	[[wikipedia:Real-time_Transport_Protocol\|RTP Protocol]] [[wikipedia:User_Datagram_Protocol\|UDP]] 18000-20000 (default range as set in RTP configuration)		[[wikipedia:Real-time_Transport_Protocol\|RTP Protocol]] [[wikipedia:User_Datagram_Protocol\|UDP]] 18000-20000 (default range as set in RTP configuration)

-	[[Image:warning.gif]] Do not use SIP transformations or any other [[wikipedia:Network_address_translation\|NAT]] traversal solutions on your network firewall unless you completely understand the implications of doing so. Ipbx is capable of handling far-end NAT traversal by setting the peer option to NAT in the channels configuration.	+	[[Image:warning.gif]] Do not use SIP transformations or any other [[wikipedia:Network_address_translation\|NAT]] traversal solutions on your network firewall unless you completely understand the implications of doing so. Ipbx is capable of handling far-end NAT traversal by setting the peer option to '''NAT''' in the channels configuration.

	This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.		This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.

Webmaster: /* Default Ports */

2011-07-11T15:35:22Z

Default Ports

← Older revision		Revision as of 15:35, 11 July 2011
Line 17:		Line 17:
	This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.		This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.

-	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the External IP Address '''externip''' value of your SIP General Settings is set your PUBLIC IP address.	+	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the External IP Address '''externip''' value of your SIP General Settings is set to your PUBLIC IP address.

	=== IAX2 Protocol ===		=== IAX2 Protocol ===

Webmaster: /* Default Ports */

2011-04-18T16:28:26Z

Default Ports

← Older revision		Revision as of 16:28, 18 April 2011
Line 17:		Line 17:
	This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.		This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.

-	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the '''externip''' value is set your PUBLIC IP address.	+	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the External IP Address '''externip''' value of your SIP General Settings is set your PUBLIC IP address.

	=== IAX2 Protocol ===		=== IAX2 Protocol ===

Webmaster: /* Connecting Multiple Sites */

2011-04-18T16:26:44Z

Connecting Multiple Sites

← Older revision		Revision as of 16:26, 18 April 2011
Line 29:		Line 29:
	== Connecting Multiple Sites ==		== Connecting Multiple Sites ==

-	Whether you are connecting a couple of phones in a remote office or connecting two ipbx systems, it is always recommended to use a VPN. This ~~will~~ prevent NAT problems and increase your security.	+	Whether you are connecting a couple of phones in a remote office or connecting two ipbx systems, it is always recommended to use a VPN or similar which allows control over bandwidth and use. This can prevent NAT problems and increase your security.

Webmaster: /* Default Ports */

2010-12-08T23:49:24Z

Default Ports

← Older revision		Revision as of 23:49, 8 December 2010
Line 17:		Line 17:
	This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.		This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.

-	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet.	+	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet. If you are using a private IP address or a combination of private IP address and public IP (multi-homed), then make sure the '''externip''' value is set your PUBLIC IP address.

	=== IAX2 Protocol ===		=== IAX2 Protocol ===

Webmaster: /* Default Ports */

2010-08-13T16:00:30Z

Default Ports

← Older revision		Revision as of 16:00, 13 August 2010
Line 14:		Line 14:

	[[Image:warning.gif]] Do not use SIP transformations or any other [[wikipedia:Network_address_translation\|NAT]] traversal solutions on your network firewall unless you completely understand the implications of doing so. Ipbx is capable of handling far-end NAT traversal by setting the peer option to NAT in the channels configuration.		[[Image:warning.gif]] Do not use SIP transformations or any other [[wikipedia:Network_address_translation\|NAT]] traversal solutions on your network firewall unless you completely understand the implications of doing so. Ipbx is capable of handling far-end NAT traversal by setting the peer option to NAT in the channels configuration.
		+
		+	This applies particularly to Sonicwall 'SIP Transformations' and Netscreen/Juniper 'SIP ALG' settings.

	It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet.		It is highly recommended to have a public IP address available for your server if using SIP trunking or if you intend to connect SIP phones over the public internet.

Webmaster at 19:33, 29 January 2009

2009-01-29T19:33:48Z

← Older revision		Revision as of 19:33, 29 January 2009
Line 24:		Line 24:

	[[wikipedia:IAX2\|IAX2 Protocol]] [[wikipedia:User_Datagram_Protocol\|UDP]] 4569		[[wikipedia:IAX2\|IAX2 Protocol]] [[wikipedia:User_Datagram_Protocol\|UDP]] 4569
		+
		+	== Connecting Multiple Sites ==
		+
		+	Whether you are connecting a couple of phones in a remote office or connecting two ipbx systems, it is always recommended to use a VPN. This will prevent NAT problems and increase your security.

Webmaster at 17:31, 30 December 2008

2008-12-30T17:31:51Z

← Older revision		Revision as of 17:31, 30 December 2008
Line 1:		Line 1:
	It is always recommended to use a [[wikipedia:Firewall_(networking)\|network firewall]] to protect your PBX from unwanted access. Please consult with your router/firewall vendor for further details.		It is always recommended to use a [[wikipedia:Firewall_(networking)\|network firewall]] to protect your PBX from unwanted access. Please consult with your router/firewall vendor for further details.

-	The ipbx web interface uses standard port [[wikipedia:Transmission_Control_Protocol\|TCP]] 80 or TCP 443 (secure). It is not recommended to expose the web interface to the public internet with standard PIN based user authentication. See [[End_User_Panel\|End User Panel Login]]	+	The ipbx web interface uses standard port [[wikipedia:Transmission_Control_Protocol\|TCP]] 80 or TCP 443 (secure). It is not recommended to expose the web interface to the public internet with standard PIN based user authentication. See [[End_User_Panel\|End User Panel Login]].

	=== SIP Protocol ===		=== SIP Protocol ===

Webmaster at 17:31, 30 December 2008

2008-12-30T17:31:22Z

← Older revision		Revision as of 17:31, 30 December 2008
Line 1:		Line 1:
	It is always recommended to use a [[wikipedia:Firewall_(networking)\|network firewall]] to protect your PBX from unwanted access. Please consult with your router/firewall vendor for further details.		It is always recommended to use a [[wikipedia:Firewall_(networking)\|network firewall]] to protect your PBX from unwanted access. Please consult with your router/firewall vendor for further details.

-	The ipbx web interface uses standard port [[wikipedia:Transmission_Control_Protocol\|TCP]] 80 or TCP 443 (secure). It is not recommended to expose the web interface to the public internet with standard PIN based user authentication.	+	The ipbx web interface uses standard port [[wikipedia:Transmission_Control_Protocol\|TCP]] 80 or TCP 443 (secure). It is not recommended to expose the web interface to the public internet with standard PIN based user authentication. See [[End_User_Panel\|End User Panel Login]]

	=== SIP Protocol ===		=== SIP Protocol ===