Tech

Configuring your firewall for remote users

Published on:

February 6, 2020

Configuring your firewall for remote users is essential for enabling VoIP communications through the Vodia PBX. This setup requires allowing specific TCP and UDP ports, including 5060 and 5061 for SIP signaling, UDP ports 49152 to 64512 for RTP and TCP ports 80 and 443 for web access. Additionally, setting the appropriate IP routing entries ensures both internal and remote phones can communicate effectively, utilizing a netmask that accommodates local network traffic while allowing access from external sources. This dual configuration allows for seamless call management across different network environments.

A firewall controls the incoming and outgoing network traffic based on an applied rule set and establishes a barrier between a trusted, secure LAN and/or WAN network(s) and the internet (neither secure nor trusted).

Vodia Networks recommends a LAN architecture where the voice traffic bypasses the firewall:

LAN Achritecture

If a firewall feature is configured, it must allow the following ports to pass (if you want to connect remote users to the PBX then you will need to configure the Vodia SBC settings):

  • Allow TCP/UDP ports 5060, 5061 (for SIP)
  • Allow UDP ports 49152–64512(for RTP)1
  • Allow UDP port 123 (for NTP)
  • Allow TCP port 80 (for HTTP)
  • Allow TCP port 443 (for HTTPS)

Vodia PBX SBC

Vodia SBC - SIP Settings

In order to make the PBX show the public IP address, you need an entry that matches "every other IP address". In other words, the netmask must be 0.0.0.0 (for example, "0.0.0.0/0.0.0.0/123.124.125.126"). The problem is it will block all calls on the private network, so there is also a necessary rule for the private network.

Example: Let's say the PBX is running on 192.168.1.2 address, the netmask is 255.255.0.0 and the internal SIP phones have 192.168.x.x addresses. So the first part of the entry will be "192.168.0.0/255.255.0.0/192.168.1.2". This part will take care of the internal phones. Now, if the phone and PBX have to talk to remote phones and servers, then you have added another part to the "IP Routing List". Consider the public IP address is 123.124.125.126 (this the IP address provided/assigned by the internet service provider). You can check the public IP using http://whatismyip.com/), then you will have "0.0.0.0/0.0.0.0/123.124.125.126" as the other part of the entry.

Putting it all together, an entry of "192.168.0.0/255.255.0.0/192.168.1.2 0.0.0.0/0.0.0.0/123.124.125.126" will make the PBX serve both internal and remote phones.

In this example, the PBX would not look at the routing presented by the operating system.

Latest Articles

View All

Vodia Networks | 2024 End-of-Year Recap

Vodia’s 2024 recap highlights several key milestones, including the certification of our PBX for Microsoft Teams, which will shape the direction of our platform moving forward. We’re addressing areas where Teams falls short, particularly through SIP interoperability. In addition, our efforts to integrate Realtime AI via APIs have shown great progress, with exciting advancements planned for 2025. We’ve also made significant improvements to our PBX interface, transitioning to the more modern Tailwind framework, and launched a native Android app. iOS improvements are also in the pipeline. With AI set to transform telephony, Vodia is positioned to lead the way, bringing AI-driven capabilities to enhance productivity in 2025.

December 20, 2024

Seamless Integration of Microsoft Teams with Fanvil 2-Wire Solutions: Join Our Upcoming Webinar

Join us for an informative webinar where Vodia and Fanvil will demonstrate how to integrate Fanvil’s 2-wire solutions with Microsoft Teams using Vodia’s Microsoft-certified SBC. Discover how businesses in industries like hotels, schools, and enterprises can modernize their communication systems while leveraging existing infrastructure for cost-effective and seamless deployments. This session will provide practical strategies, real-world applications, and best practices to streamline Teams connectivity and enhance efficiency. Don’t miss this opportunity to see how Fanvil and Vodia are transforming business communications.

December 20, 2024

Integrating OpenAI's Realtime API with Vodia PBX: Webinar Recording Now Available

In our recent webinar, "Integrate OpenAI’s Realtime API with Vodia PBX," we explored how integrating AI with your communication systems can revolutionize the way your business operates. From automating repetitive tasks to improving workflow efficiency, the webinar covered how the collaboration between Vodia PBX and OpenAI’s Realtime API can streamline operations, enhance collaboration - especially for Microsoft Teams users - and provide intelligent automation to stay ahead in a competitive landscape. If you missed the live session or want to revisit the insights, the recording is now available for you to access.

December 18, 2024