Please pay particular attention to spaces and dashes in the CLI based steps or you may receive error warnings

From the Fortinet Appliance Command Line Interface

Remove SIP Helper

In the Command Line Interface (CLI) run the following commands:

• config system session-helper
• show

Notice that edit 13 contains SIP.

Enter the following commands:

• delete 13
• end

Disable SIP ALG

In the Command Line Interface (CLI) run the following commands:

• config system settings
• set default-voip-alg-mode kernel-helper-based
• set sip-helper disable
• set sip-nat-trace disable
• end

Reboot the Router while using the Web GUI under Status, or in the CLI with the following command:

• execute reboot

Disable Strict Register

Strict Register forces VoIP devices through a pinhole at port 65476 and will cause duplicate porting to occur.

To disable this setting, run the following command in the Command Line Interface (CLI):

• config voip profile
• edit <Profile_name>
• config sip
• set strict-register disable
• end

From the Fortinet Appliance GUI / UX

1. Enable Traffic Shaping, Referencing the image below:
   • Go to SYSTEM > FEATURE VISIBILITY
   • Enable Traffic Shaping and VoIP under the ADDITIONAL FEATURES column
   • Left single mouse-click APPLY

2. Set Inspection Mode To Proxy, Referencing the image below:
   • Go to SYSTEM > SETTINGS and scroll down to almost the bottom of the page.
   • Look for the option Inspection Mode and left single mouse-click on the option PROXY (this allows you to build VoIP proxies)
   • Left single mouse-click APPLY

3. Referencing the images below, create a VoIP Traffic Shaper
   
   

• Left single mouse-click on CREATE NEW
• Fill in the information and enable the settings as shown in the Edit Traffic Shaper screenshot.
• Left single mouse-click on OK

4. Create Spectrum VoIP Addresses, Services, and Address Groups using the following information:

1. ADDRESSES
   • Referencing the images below:

• Navigate to POLICY AND OBJECTS > ADDRESSES and perform the following steps for each of the Spectrum VoIP IP Public Subnets referenced above.
  • Left single mouse-click on CREATE NEW > ADDRESS
  • Give the Address a name. (It is suggested to use a descriptive name such as the one used in this example)
  • Fill in the SUBNET / IP RANGE with ONE of the addresses.
  • Left single mouse-click OK
    
    
    

1. ADDRESS GROUP
   • Referencing the images below:

• Navigate to POLICY AND OBJECTS > ADDRESSES and perform the following:
  • Left single mouse-click on CREATE NEW > ADDRESS Group
  • Give the Address Group a name. (It is suggested to use a descriptive name such as the one used in this example)
  • Left single mouse-click the + sign under the Members object.
  • Left single mouse-click on each of the Spectrum VOIP Address Objects you created in the previous step.
  • Once you have selected all of the addresses look for the Close button at the bottom of the Select Entries and left single mouse-click.
  • Left single mouse-click OK

1. SERVICES / PORTS
   • Referencing the images below:

• Navigate to SERVICES
  • Left single mouse-click on CREATE NEW > SERVICE and perform the following steps for each of the Spectrum VoIP IP ports referenced above.
    • Left single mouse-click on CREATE NEW > SERVICE
    • Give the Service a name. (It is suggested to use a descriptive name such as the one used in this example)
    • Set the PROTOCOL TYPE as shown above.
    • Ensure the ADDRESS is set for IP RANGE
    • Select the appropriate port type
    • Fill in the appropriate port information for each port described under Ports - Stratus Platform & Ports - Enswitch 1 and 2 Platforms.
    • Fill in the SUBNET / IP RANGE with ONE of the addresses.
    • Left single mouse-click OK
      
      

5. Create an IPv4 Policy for Spectrum
   • Referencing the images below create the Spectrum policy.

• Left single mouse-click on CREATE NEW
• Give the Policy a name. (It is suggested to use a descriptive name such as the one used in this example)
• Configure settings as shown above. NOTE: You may use a different name for the internal connection depending on how your device is configured. Use the appropriate LAN connection for your configuration.
• Ensure the policy is active, or turn it on once you apply the settings.
• Left single mouse-click OK

6. Navigate to your VOIP Profile and set the Register, Invite, and SCCP request limits as suggested by your installation technician. (300 if unsure)

7. Create a Traffic Shaping Policy Referencing the images below:
   
   
   
8. Edit the Traffic Shaping Policy, Referencing the images below:
   
   • Navigate to TRAFFIC SHAPING POLICY
   • Select CREATE NEW
   • Complete the policy as shown above.
     1. NOTE 1: Pay careful attention to the SIP and VOIP selections as they may be in different locations depending on the age, and firmware version of your Fortinet.
     2. NOTE 2: Ensure you select the name of the Policy / Traffic Shaper you created earlier.

Congratulations! You have completed the pre-engagement setup.

If you have issues or questions with the configurations described above, a good first point of contact is to call your SpectrumVoIP Rep, another excellent option is to call Fortinet at 844-459-2514 or 866-648-4638, be aware your device must have an active Maintenance and Support Agreement in effect for their service.