I denne artikel:
Important: If the firewall supports SIP ALG or other kind of SIP/VoIP packet inspection, it must be disabled. Also ensure that other SIP or VoIP services are disabled, as it might interfere the voice traffic.
Dstny ConnectMe
Outbound rules:
| To | Port | Protocol | Service |
| 185.39.124.98 185.39.124.99 185.39.125.98 185.39.125.99 185.39.125.17 | 443 | TCP | HTTPS |
| 94.127.49.224/28 | 49152-65535 | UDP | RTP |
Inbound rules:
| From | Port | Protocol | Service |
| 94.127.49.224/28 | 49152-65535 | UDP | RTP |
Dstny Softphone and desk phones
Outbound rules:
| To | Port | Protocol | Service |
| 94.127.49.0/24 | 80 | TCP | HTTP |
| 94.127.49.54 94.127.49.55 | 123 | TCP+UDP | NTP |
| 94.127.49.0/24 | 443 | TCP | HTTPS |
| 94.127.49.224/28 | 9443 | TCP | HTTPS |
| 94.127.49.224/28 | 5060 | TCP+UDP | SIP |
| 94.127.49.224/28 | 5061 | TCP+UDP | SIPS (TLS) |
| 94.127.49.224/28 | 49152-65535 | UDP | RTP |
| 78.110.204.82/32 | 80 | TCP | HTTP |
| 78.110.204.82/32 | 443 | TCP | HTTPS |
Inbound rules:
| From | Port | Protocol | Service |
| 94.127.49.224/28 | 5060 | TCP+UDP | SIP |
| 94.127.49.224/28 | 5061 | TCP+UDP | SIPS (TLS) |
| 94.127.49.224/28 | 49152-65535 | UDP | RTP |
Mitel desk phones
| To | Port | Protocol | Service |
| 1.aastra.pool.ntp.org | 123 | UDP | NTP |
| 2.aastra.pool.ntp.org | 123 | UDP | NTP |
| 3.aastra.pool.ntp.org | 123 | UDP | NTP |
| ntp.ipvision.dk | 123 | UDP | NTP |
| ntp1.ipvision.dk | 123 | UDP | NTP |
| rcs.aastra.com | 80 | TCP | HTTP |
| rcs.aastra.com | 443 | TCP | HTTPS |
| rcs.mitel.com | 80 | TCP | HTTP |
| rcs.mitel.com | 443 | TCP | HTTPS |
When using Mitel desk phones your DNS has to be able to resolve and connect to Mitel Configuration server (RCS):
| Address |
| rcs.aastra.com |
Snom desk phones
| To | Port | Protocol | Service |
185.39.124.0/22 | 9443 | TCP | HTTPS |
| 52.28.89.237 | 443 | UDP | HTTP(S) |
| ntp.ipvision.dk | 123 | UDP | NTP |
| ntp1.ipvision.dk | 123 | UDP | NTP |
pool.ntp.org | 123 | UDP | NTP |
When using Snom desk phones your DNS has to be able to resolve and connect to Snom Configuration server (SRAPS):
| Address |
| sraps.snom.com |
| rps.snom.com |
Yealink desk phones
| To | Port | Protocol | Service |
pool.ntp.org | 123 | UDP | NTP |
When using Yealink desk phones your DNS has to be able to resolve and connect to Yealink Redirection and Provisioning Service (RPS):
| Address |
| dm.yealink.com |
SIP trunks
Outbound rules:
| To | Port | Protocol | Service |
| 94.127.49.224/28 | 5060 | TCP+UDP | SIP |
| 94.127.49.224/28 | 5061 | TCP+UDP | SIPS (TLS) |
| 94.127.49.224/28 | 49152-65535 | UDP | RTP |
Inbound rules:
The inbound rules depends on the configuration of the PBX. Typically, SIP uses port 5060 UDP or TCP and SIPS (TLS) uses port 5061 TCP. But if the PBX uses other ports, the firewall rules must be defined accordingly.
Esim (TDC netværk)
| Address |
| Rsp-3038.idemia.io |
Comments
0 comments
Please sign in to leave a comment.