Notes to observe:
- Make sure that SIP-Inspection / SIP-ALG / SIP-Helper is disabled in the local firewall.
- If services aren ́t working as expected, please allow the rules from the inside of the local firewall as well.
- Media/Speech is negotiated dynamically in the SDP for every call. Therefore it is necessary to allow the whole port span.
Dstny base functionality:
| To | Destination port | Protocol | Transport |
|
Dstny telephony system |
|||
| 185.39.124.0/22 | 443 | HTTP(S) | TCP |
| 185.39.124.0/22 | 5060/5061 | SIP | TCP/UDP |
| 185.39.124.0/22 | 10000-65534 | RTP/SRTP | UDP |
For you with desk phones:
Below displays optional firewall settings if you are using desk phones from Mitel or Snom.
| To | Destination port | Protocol | Transport | Rule | Comment |
| Fixed phones | |||||
| 1.aastra.pool.ntp.org | 123 | NTP | UDP | Allow | Used for date/time in fixed phones |
| 2.aastra.pool.ntp.org | 123 | NTP | UDP | Allow | Used for date/time in fixed phones |
| 3.aastra.pool.ntp.org | 123 | NTP | UDP | Allow | Used for date/time in fixed phones |
| 0.se.pool.ntp.org | 123 | UDP | Allow | Used for date/time in fixed phones | |
| Snom phone provisioning | |||||
| 185.39.124.0/22 | 9443 | HTTPS | TCP | Allow | Used for provisioning of Snom phones |
| Snom SRAPS | |||||
| 52.28.89.237 | 443 | HTTP(S) | TCP | Allow |
Snom phone settings distribution |
| Mitel Phone RCS |
|
||||
| rcs.aastra.com | 80 / 443 | HTTP(S) | TCP | Allow |
Mitel phone settings distribution |