| Info |
|---|
This file describes Switchvox version 6.6. If you are using an earlier version, use SERVER-NETWORKING-6-0 |
| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Networking
Networking includes tools to manage the following:
IP Configuration
This tool lets you set the IP configuration for Switchvox. These settings are similar to settings you would set on any other computer on your network.
...
You cannot use this feature if your ISP does not give you a static external IP address. Check with your ISP to make sure that the public IP you enter here will not change. If you do not have a static public IP, you will only be able to use phones from within your local network.
eth0 Interface
Protocol. Select either DHCP or Static.
IP Address. Set when you installed the Switchvox software, and you do not normally need to change this information after installation.
Netmask. Set when you installed the Switchvox software, and you do not normally need to change this information after installation.
Advanced Options
It is unusual to change the Advanced Options, so they are hidden. If you find that you need to change an Advanced Option, click Show Advanced Options. You can enter information in the following fields:
...
When you have finished entering/editing the IP Configuration options, click the Save IP Configuration button.
HTTP and Proxy
HTTPS and Proxy settings direct all outgoing HTTP and HTTPS traffic to a web proxy. In Release 6.6, these settings are expanded. Now you can enter an SSL Certificate from a 3rd-party Certificate Authority, or from your organization's own Certificate Authority. If you do not have an SSL Certificate, SSL is explicitly Managed by Switchvox. For details, see HTTPS and SSL Certificates.
| Info |
|---|
NOTE: Saving these changes requires a restart; all active calls will be dropped. We do not recommend making these changes during business hours. If changes are made here related to SSL Certificates, you must save and verify the appropriate changes on each Peered Switchvox. Then on each peer, navigate to Setup > Peered Switchvoxes, open the peer, and click the icon Fetch Peer Certificates, then click Save Peered Switchvox. |
General Settings (tab)
...
Proxy SettingsThe proxy settings direct all outgoing HTTP and HTTPS traffic to a web proxy.
Proxy Hostname or IP Address
Proxy Port
Proxy Username
Proxy Password
Retype Proxy Password
SSL Certificates
Switchvox Managed. Leave this set to YES, unless you have purchased an SSL Certificate from a trusted 3rd-party Certificate Authority, or your organization is acting as its own Certificate Authority. If you need to enter your own SSL Certificate information, set this to NO. For details about using SSL Certificates, see the knowledge base article HTTPS and SSL Certificates.
When you have completed entering/editing, click the Save HTTPS and Proxy button.
Certificate Authorities (tab)
...
When Managed by Switchvox is set to YES under the General Settings tab, Switchvox auto-generates a certificate for internal web traffic. This CA Certificate is available under the Certificate Authorities tab, at the top of the list. Click the download arrow button to download a copy for use with a client communicating with Switchvox via HTTPS.
...
When you have completed entering/editing, click the SaveHTTPS and Proxybutton.
Access Control
The Access Control tool lets you manage which networks have access to Switchvox.
...
The Access Control Rules (tab) allows network access to Switchvox services based on IP address and Netmask. The default action is to deny access, so if you don’t allow a service for a network, then the network is denied access to that service.
The IP Blocking Options tab lets you set the number of attempts that trigger Switchvox to block an IP from accessing Switchvox at all. To search for and Unblock IP addresses, use Server > Blocked IPs.
Access Control Rules tab
The Local Network rule by default allows all traffic for all services. The All Networks rule allows traffic for various services depending on your Switchvox configuration. You can modify the services allowed for the Local Network and All Networks rules, but you cannot change the name or the network.
Create Access Control Rule
Click Create Access Control Rule.
...
Click Save Rule when ready; or Cancel to cancel.
IP Blocking Options
...
Blocked IPs
Switchvox automatically blocks an IP if it is attempting to log in or register a phone with a bad username and password. This is based on the assumption that if someone is trying to reach Switchvox without valid login information, that person probably does not have a legitimate reason to reach Switchvox.
...
| Info |
|---|
Note: If you have physical access to the Switchvox server, you can use the Basic Server Function Unblock Local IPs to remove the blocks for local IP addresses. (See also: Basic Server Functions.) |
...
Manage Physical Access to the Server
If you have an appliance with an LCD Panel, you can disable other access to the appliance. You can also clear the password on the LCD Panel, in case you have forgotten it.
Basic Server Functions
There are several functions that can or must be done at the Switchvox server; those functions are listed here. Use the LCD Panel on your Appliance if there is one, or connect a keyboard and monitor to the Appliance.
Phone Networks
Phone Networks determine how a Digium Phone should behave, depending on the IP address and netmask of the Phone as it sits on the network. If the Phone cannot get on the network because it is trying in vain to use the wrong Phone Networks information, use the Phone's Select Network option to select the Phone Network that matches the network you want the phone to use.
...
The Phone Network screen lists all phone networks with their respective information. Three actions are available for each entry: display Details, Modify, and Delete. When creating a Phone Network, enter the following information, and click the Save Phone Network button when finished. This lists the network on the Phone Network screen. Modify options are the same as the Create options.
...
Create Phone Network
...
General Settings. Normally a phone just uses port 5060 for all of these activities and for handling calls. However, if set to YES, the phone uses those ports as indicated. This is useful because those protocols are better suited for those activities. That's why the default phone network. Internal is set to YES.
Name. A unique name for this network.
Network. The IP address and Netmask of the network where Digium Phones could be located.
This should be the IP address that the phone obtains and uses to identify itself on this network. For example, this might be a subnet in your office, or the IP address of a phone at an employee's home. (This is not a remote employee's external IP address, which you would use in an Access Control Rule.)
Direct Port Access. Set this to YES if the phone, while on this network, has access to these ports on Switchvox: Port 80, for getting phone firmware. (If a remote phone cannot reach your Switchvox to get phone firmware, the phone will get the firmware from Digium's servers). Port 443, for getting additional files and accessing Switchvox's API.
Normally a phone just uses port 5060 for all of these activities, and for handling calls. But, if this is set to YES, the phone uses those ports as indicated. This is useful because those protocols are better suited for those activities. That's why the default phone network Internal is set to YES.
NTP Server. By default, Digium Phones use NTP to retrieve time settings. Unless you have a particular reason, do not change these settings.
Advanced Settings
To enter advanced settings, click the Advanced Settings button. This displays the following options:
Primary Host (PBX)
Alternate Host
Virtual LAN Settings
Quality of Service Settings
Miscellaneous Settings
Affected Version(s)
6.6.0.1