Articles in this section

Recommended Firewall Settings

Jeremy
  • Updated
Follow

 

Note: We highly recommend consulting an IT or network professional when configuring advanced network settings or devices.

 

General Configuration

Disable all of the following

  • SIP ALG (Application Layer Gateway) functions such as SIP Transformations, SIP Application Helpers, SIP Normalization, etc. 
  • SPI (Stateful Packet Inspection)
  • AV Client Enforcement on any IP assigned to a phone
  • Content Filtering on any IP assigned to a phone

Enable all of the following

  • Bandwidth Management/Traffic Shaping (See below for a list of our network blocks and bandwidth requirements)
  • Default UDP session timeout to 300 seconds
  • Consistent NAT (Sonicwall)
  • Load balancing policy configured for ingress and egress of phones on same WAN interface only. (If applicable)
  • Inbound and outbound traffic on ports and subnets listed below
  • DNS resolution for the phones

Subnet and Port Configuration

SpectrumVoIP Public Subnets

  • 199.71.209.0/24
  • 24.227.249.0/25
  • 72.249.136.32/28
  • 206.123.122.32/27
  • 212.69.157.32/27

Ports - Stratus Platform

  • 5060-5062 UDP - SIP
  • 20,000-40,000 UDP - RTP
  • 80, 443 TCP - HTTP/HTTPS

Ports - Enswitch 1 and 2 Platforms

  • 5060-5062 UDP - SIP
  • 10,000-20,000 UDP - RTP
  • 80, 443 TCP - HTTP/HTTPS

Bandwidth Requirements

Voice only applications utilize G.711 U-Law as the primary codec and require 87.2Kbps of bandwidth per active call. We've found a good rule of thumb is to round the requirement up to 100Kbps to account for signaling and overhead. 

Example:

A 10Mbps/1Mbps ISP connection that is solely dedicated to the phones would support 10 concurrent phone calls.

We highly recommend that Bandwidth Management/Traffic Shaping policies prioritizing VoIP traffic are configured and tested on your router/firewall.

 

 

Related articles