Community Forums/Knowledge Base/VOIP

SIP / VOIP firewall configuration guide

Sam Aparicio
posted this on November 29, 2010 12:22 pm

August 19, 2011

If you're trying to use a softphone or IP phone to get phone calls from Ringio and the devices are sitting behind a firewall, you may have to open some ports in the firewall to ensure that the audio gets through. If you don't know if you're behind a firewall, just point your web browser to http://www.amibehindnat.com/ for a diagnostic. -- (Java support required)

Make sure that your firewall / broadband router allows inbound traffic (from the internet to your personal network) on these ports:

  • 69-69 UDP
  • 5060-5066 UDP
  • 8000-8003 UDP
  • 10,000-20,000 UDP

Depending of the configuration/device used, different ports may be accessed. It's recommended that you put the device IP on the router DMZ.

 

 

 

We recommend any router that uses the DD.WRT firmware.

For your existing router, our recommendations are:
* Set firewall rules that put the IP phones in a DMZ. That means that all TCO and UDP traffic from the outside WAN has to be able to hit the phones. If you don't do this you will get dropped calls, phones that ring but don't work, or intermittent working phones.
* Disable SIP Transformations.
* Under Firewall -> Advanced => Increase UDP Timeout to 120
* Turn on Consistent NAT
 

Comments

User photo
ava

Right now we have 4 users all on a separate static external ip address. I would like to consolidate everyone behind the same external ip, however I ran in to calls "floating" or crossing from user to another when there are simultaneous calls. Any suggestions on what is a proper way to set up multiple users behind the same ip? I tried using different sip ports per user but it didn't help.

February 27, 2012 11:46 pm
Add a comment