Table of Contents | ||
---|---|---|
|
Firewall / NAT Checklist
If you plan on using phones or accessing Switchvox from remote clients, you must forward certain ports back to your PBX. Also, you'll need to enable the "Allow Nat Port Forwarding" option in the Server > Networking > IP Configuration section of your Switchvox Web Admin.
...
Transport | Port(s) | Description |
---|---|---|
D-Series and P-Series Phones | ||
TCP/UDP | 5060 | SIP signaling port needed for phones outside your network |
TCP/UDP | 5061 (SIP TLS) | For SIP TLS port needed for phones outside your network, only if you are using TLS/SRTP transport option |
UDP | 10000-20000 | RTP audio ports needed for phones outside your network |
TCP | 443 | HTTPS port for API access |
TCP | 80 | HTTP port for D-Series phone-firmware access |
UDP | 5062 | Direct port access for D-Series phones for configuration (Deprecated / Not used after Switchvox 6.4) |
Sangoma Connect/Talk Mobile | ||
TCP/UDP | 5060 | SIP signaling ports needed for phones outside your network |
UDP | 10000-20000 | RTP audio ports needed for phones outside your network |
TLS | 5095 | SIP signaling to http://cloud-fe.meet.sangoma.com to facilitate audio transfer from Switchvox to Meet when moving a call to the Meet service. |
IP Whitelist | Sangoma Connect/Talk SIP Push/Register servers require SIP access to your PBX for the application to work correctly. If we have a restrictive firewall, please ensure that the following IPs can reach your PBX in TCP/UDP ports 5060 and 5061. For more information, please visit How to Set Up and Manage Switchvox for Sangoma Connect Mobile /wiki/spaces/ST/pages/429129872. | |
Legacy Switchvox Mobile Softphones (Not recommended in 7.6.2 or later, and deprecated in 7.8.2) | ||
TCP/UDP | 5060 | SIP signaling port needed for phones outside your network |
TCP/UDP | 55062 | SIP signaling port that may be needed for Legacy Mobile Softphones |
UDP | 10000-20000 | RTP audio ports needed for phones outside your network |
TCP | 443 | HTTPS port for API access |
Desktop Softphones and Switchvox Chat for Mobile | ||
TCP | 443 | HTTPS port for Desktop client |
UDP | 10000-20000 | RTP audio ports needed for phones outside your network |
Web Portal for Admin or User | ||
TCP | 80 | HTTP port for remote web |
TCP | 443 | HTTPS port for remote web admin, user and API access |
TCP | 5222 & 843 | Ports for using the Switchboard remotely (Deprecated / Not used after Switchvox 7.0) |
TCP | 5269 | Port for remote XMPP access (Deprecated / Not used after Switchvox 7.0) |
VoIP provider with T.38 Support | ||
UDP | 5060 | SIP signaling port needed to connect with your VoIP provider outside of your network |
UDP | 10000-20000 | RTP audio ports needed for phones outside your network |
UDPTL | 4000-4999 | UDPTL ports for T.38 faxing over SIP |
UDP | 4569 | IAX Signalling for IAX provider (Deprecated / Not used after Switchvox 7.0) |
...
We also have accumulated a shortlist of specific 3rd party firewall settings for various makes/models /wiki/spaces/NC/pages/397606952 that we know can cause issues with the Switchvox software.