|

Help center

Submit a ticket My Tickets
Welcome
Login  Sign up

Firewall Settings and PBX Access Control

In this article, we describe how to configure your firewall for SIP operation. You can also learn how to whitelist specific IP addresses that are permitted to access your system. Such settings will increase your network protection, minimize security risks, and prevent unauthorized access to your PBX. 

Firewall Settings

  • Open firewall ports

We recommend opening firewall ports towards your PBX server with any/any rules, or the following ports:

5060 TCP & UDP
5061 TCP
10000-20000 UDP
443 TCP
80 TCP

  • Allow monitoring for IP addresses

Allow ICMP ping and latency monitoring for the IP addresses below. Allowing it will enable the CommPeak team to provide you with optimum support. 

116.202.64.40
104.199.5.135
109.169.12.37
23.19.63.66
139.162.33.28
35.198.29.133
169.57.216.71
38.91.107.164
96.47.228.250
38.91.100.151
167.88.61.171 

104.199.214.247

Make sure to add the IP address of your PBX server as well.

TIP

You can find the IP address of your PBX server in Labs > PBX Instances tab.

Access Control Lists

To set the access control list:

  1. In the menu on the left, select Labs.
  2. On the PBX Instances tab, click the Settings icon.

The PBX Instance Details pane with several tabs will open on the right. Here you can insert IP addresses to web and SIP access lists.

Web Access ACL

Web ACL restricts access to your PBX and PBX Stats websites. 

To set the web access list:

  1. Click the Web access ACL tab in the PBX Instance Details pane.
  2.  In the field under IP ACL, enter an IP address in the x.x.x.x format. You can also enter a name server address if you set up Dynamic DNS. For more information on DDNS, refer to the section below about Dynamic IP Addresses.
  3. Click on the plus icon to add the IP address. 
  4. Add all the IPs one by one.
  5. To temporarily disable a specific IP, toggle the button next to the IP address. To delete an IP, click on the delete icon.
  6. Click Save Changes

NOTE

In the examples below, we use random IP addresses from a public database.

Web access ACL

SIP Access ACL

SIP ACL whitelists specific IP addresses for SIP registration and calls. 

To set the SIP access list:

  1. Click the SIP access ACL tab in the PBX Instance Details pane.
  2.  In the field under IP ACL, enter an IP address in the x.x.x.x format. 
  3. Click on the plus icon to add the IP address. You can also enter a name server address if you set up Dynamic DNS. For more information on DDNS, refer to the section below about Dynamic IP Addresses.
  4. Add all the IPs one by one.
  5. To temporarily disable a specific IP, toggle the button next to the IP address. To delete an IP, click on the delete icon.
  6. Click Save Changes

SIP access ACL

Solution for Dynamic IP Addresses

You can effectively whitelist IP addresses for static IPs only. It is often a case that your Internet Service Provider gives you a dynamic IP address. It keeps changing over and over again so you can get rejected.  In such a case, the Dynamic Domain Name Service (DDNS) would be a solution for you. You can register a hostname with one of the free DDNS providers (for example, no-ip). Once registered, you obtain a fixed name server address. 

You can set up ACL for a name server address in the same way. Type the address (a fully qualified domain name) in the field under IP ACL and click on the plus icon. After you click SAVE CHANGES, the address appears in the access list.


NOTE

Adding a name server address works for both the web and SIP ACL.

Whitelisting a hostname

Geo Country ACL

Geo ACL whitelists any IP from countries you can select for both web and SIP access. When accessing your resources, the users will still need to provide their credentials.

NOTE

We recommend country whitelisting as an additional measure to the web or SIP ACL.

To whitelist all IPs for countries:

  1. Enter Web access ACL or SIP access ACL tab.
  2. Click in the field under Geo ACL to expand a list of countries.
  3. Start typing to move to a specific country, or scroll down.
  4. Check the box next to the country name.
  5. Click SELECT ALL if you wish to select all countries at once. Click CLEAR to clear your selection. 
  6. To temporarily disable a specific country, toggle the button next to the country name. To delete a state, click in the field showing the number of countries selected, find the country name, and uncheck it.
  7. Click Save Changes.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.