Articles in this section

See more

Recommended Firewall Settings

Jeremy
  • Updated
Follow

 

Note: We highly recommend consulting an IT or network professional when configuring advanced network settings or devices.

 

General Configuration

Disable all of the following

  • SIP ALG (Application Layer Gateway) functions such as SIP Transformations, SIP Application Helpers, SIP Normalization, etc. 
  • SPI (Stateful Packet Inspection)
  • AV Client Enforcement on any IP assigned to a phone
  • Content Filtering on any IP assigned to a phone

Enable all of the following

  • Bandwidth Management/Traffic Shaping (See below for a list of our network blocks and bandwidth requirements)
  • Default UDP session timeout to 300 seconds
  • Consistent NAT (Sonicwall)
  • Load balancing policy configured for ingress and egress of phones on same WAN interface only. (If applicable)
  • Inbound and outbound traffic on ports and subnets listed below
  • DNS resolution for the phones

Subnet and Port Configuration

SpectrumVoIP Public Subnets

  • 199.71.209.0/24
  • 24.227.249.0/25
  • 72.249.136.32/28
  • 206.123.122.32/27
  • 212.69.157.32/27
  • 40.143.31.64/27

Ports - Stratus Platform

  • 5060-5062 UDP - SIP
  • 20,000-40,000 UDP - RTP
  • 80, 443 TCP - HTTP/HTTPS
  • StratusMEETING - TCP and UDP
    • 54.188.133.147:3443
    • 3.130.158.184:3443
    • 35.183.150.146:3443
  • Text To Speech Services - TCP and UDP
    • 54.149.243.27:8000
    • 35.175.185.150:8000
    • 54.149.243.27:3001
    • 35.175.185.150:3001
  • StratusWEB PHONE
    • 9002 - TCP - websockets
  • Portal Dynamic Updates
    • 8001 - TCP

Ports - Enswitch 1 and 2 Platforms

  • 5060-5062 UDP - SIP
  • 10,000-20,000 UDP - RTP
  • 80, 443 TCP - HTTP/HTTPS

DHCP VLAN Option

Option 132: Set Voice VLAN ID

  • (Only works for yealink brand phones and needs to be made as a custom option on the DHCP Server)
  • Type = String (ASCII)
  • Value = 'VLANTAG' for example '20' for VLAN 20
  • This DHCP option should be applied to your native DHCP scope so the phones receive the configuration when first plugged in. It may also be applied to the voice VLAN, but is not required.

 

Bandwidth Requirements

Voice only applications utilize G.711 U-Law as the primary codec and require 87.2Kbps of bandwidth per active call. We've found a good rule of thumb is to round the requirement up to 100Kbps to account for signaling and overhead. 

Example:

A 10Mbps/1Mbps ISP connection that is solely dedicated to the phones would support 10 concurrent phone calls.

We highly recommend that Bandwidth Management/Traffic Shaping policies prioritizing VoIP traffic are configured and tested on your router/firewall.

 

 

Related articles