Remote Phones
- 1 Administrators: Port forwarding
- 2 Important: Make sure the phone works locally first
- 3 Multiple phones behind one router/NAT
- 4 VPN tunnels, using
- 5 Firewall: SIP-handling features must be disabled
- 6 Bandwidth Considerations
- 7 Setting the time
- 8 Reconfigure your Firewall
- 9 How to reconfigure your phone
- 10 Troubleshooting
- 11 Reference
Administrators: Port forwarding
Refer to "reconfigure your firewall", below. Also see:
Port forwarding diagnostics and security considerations
Important: Make sure the phone works locally first
Before you can take a IP phone to a remote location (like a home office), the phone must be configured and verified working local to your PBXtra . In many cases, this is as simple as plugging the phone in to the same network as your PBXtra . If you are reading these instructions and you have already configured a phone on the local network, please read below for the "gotchas" about telecommuting.
Multiple phones behind one router/NAT
Many newer routers allow multiple remote phones to register from a single remote location. For example, the Cisco SRP521W and SRP541W routers are able to do this. However, this is highly dependent on the router/firewall.
Regarding the firewall/router between your phones and the Internet, here's some illustration of what we're expecting it to do (and indeed, what many SOHO routers do by default these days*):
Internal local area network - how phones are sourcing their traffic - what the PBX would see if it were on the same LAN with the phones:
Name/usernam Host Port
SOFTPHONE017 192.168.0.102 5060
SOFTPHONE012 192.168.0.103 5060
SOFTPHONE010 192.168.0.104 5060
SOFTPHONE009 192.168.0.105 5060
Firewall/router/gateway performing NAT (Network Address Translation), with an example Public IP of 1.2.3.4:
The phones are then all sourcing from the same public IP address, but different port numbers, which helps distinguish them. This is what the PBX sees when remote phones from behind the same firewall/router are registering to it over the Internet - note the identical IPs but different ports:
Name/usernam Host Port
SOFTPHONE017 1.2.3.4 1024
SOFTPHONE012 1.2.3.4 1025
SOFTPHONE010 1.2.3.4 1031
SOFTPHONE009 1.2.3.4 1040
IMPORTANT: The NAT/router controls and keeps track of the mapping between which port number on the public ip gets mapped to which phone/local IP address on the internal network.
For example:
public ip 1.2.3.4:1025 -> maps to -> private 192.168.0.103:5060
And vice-versa; the router/NAT to consistently send outbound traffic from the phone from the same port, and not remap it to something else. For example, traffic from a particular phone should consistently go out (or whatever public port it decides to use):
private ip 192.168.0.103:5060 -> maps to -> public 1.2.3.4: 1025
The above is standard behavior of SOHO routers such as the D-Link DIR-655, Cisco SRP541W, Linksys/Cisco M20 (very small 2-3 phone router - just an example), etc.
It used to be that we simply said that multiple phones behind a remote router wouldn't work, because the routers would dumbly try to register all the phones from the same IP and same port number - there was no way for the router to tell what return traffic went to which phone:
Name/usernam Host Port
SOFTPHONE017 1.2.3.4 5060
SOFTPHONE012 1.2.3.4 5060
SOFTPHONE010 1.2.3.4 5060
SOFTPHONE009 1.2.3.4 5060
#This isn't going to work
VPN tunnels, using
If you are using a VPN to connect remote sites, you should not need to make any configuration changes to your firewall, router, or the IP phones themselves. The purpose of a VPN is to connect remote locations as though they were all part of a single Local Area Network (LAN). For this reason, as far as the PBXtra is concerned, the phones in locations connected through a VPN are on the same local network.
Firewall: SIP-handling features must be disabled
Most modern routers come with features like SIP ALG and SIP FIXUP pre-configured and "on" by default. These protocols, in our experience, do more to hurt the telecommuter's quality of service than anything else, or prevent the phone from registering entirely. If you own a router that has a SIP <insert helper function here> option enabled, please disable this option on the router to ensure proper operation.
Bandwidth Considerations
Each SIP phone call using the G711 codec uses approximately 80 kbps of bandwidth. When you make a phone call from a remote IP Phone, the remote user's Internet connection requires this 80 kbps. If their Internet connection is fairly slow in terms of broadband (1.5 Mbps down / 128 Kbps up is common for DSL customers in suburban/rural areas), the quality of their phone call may not be up to the same standard as a phone call initiated from within your office.
The remote user's bandwidth is not the only factor that affects the quality of a phone call. The remote user's Internet Service Provider (ISP) treats all traffic from the remote user's location equally. For example, the user may be watching a video from YouTube on their computer while they try to make a call. Both the YouTube video and the phone call are equal in the eyes of the ISP; however, the phone call is far more important in terms of traffic than the YouTube video. Because the ISP does not prioritize traffic by type, the quality of the phone call can change during the conversation (you may notice certain noises on the line or even words dropping out). This is not the fault of your PBXtra . The remote user may need to upgrade their Internet connection and/or you may wish to implement a VPN.
Setting the time
Please see this article: Setting the Time
Reconfigure your Firewall
PBXtra - side:
In order to register a remote IP phone with PBXtra , you must forward the following ports. Inbound traffic on these ports from the Internet must be forwarded to the internal private IP address of your PBXtra :
5060 (UDP). SIP signaling and call setup/teardown.
10000-20000 (UDP). RTP voice traffic. A voice conversation picks a random pair of ports in that range, so the entire range must be forwarded.
Disable SIP handling features on your firewall or router. In most cases, these features will interfere with VoIP traffic. Different manufacturers use different terms:
SIP ALG / Application Layer Gateway. (Seen on Linksys/Cisco)
SIP Fixup. (Cisco)
SIP Markup.
SIP Session Helper.
SIP Translation.
SIP Transformation. (Sonicwall)
Turn off any of the above.
For a full list of ports used by remote applications, read How do I verify ports for remote operations?
Remote user's side:
In addition to above, each remote user also needs to open* the following ports on their (remote-side) firewall:
5060 (UDP), responsible for call setup and teardown.
10000-20000 (UDP), which are RTP ports used for the transmission of audio.
*-Allow; in other words, do not block outbound VoIP traffic on the remote phone firewall. Port forwarding is usually only necessary on the PBX side.
Do not put the phone in a DMZ.
Internet access to TCP port 80 (HTTP) on the phone must be blocked.
Tip: Since the PBX is hosted elsewhere, you may also find SonicWall Configuration (newer) helpful for SonicWalls on the remote user's side (only).
How to reconfigure your phone
Remote users must also change the registrar server option within the phone itself. See below for directions for your particular phone type.
Introduction
Phones located on the same Local Area Network as the
/content/body/div[9]/div[1]/p[1]/span, reference to undefined name 'fon': line 1, column 1 (click for details)
MindTouch.Deki.Script.DekiScriptUndefinedNameException: reference to undefined name 'fon': line 1, column 1
at MindTouch.Deki.Script.DekiScriptVar.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
at MindTouch.Deki.Script.DekiScriptAccess.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env, Boolean evaluateProperties) [0x00000]
at MindTouch.Deki.Script.DekiScriptAccess.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
at MindTouch.Deki.Script.DekiScriptCall.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
at MindTouch.Deki.Script.Dom.DekiScriptDomExpr.Evaluate (MindTouch.Deki.Script.DekiScriptEvalContext context, System.Xml.XmlNode parent, MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
register using the followingFQDN:
/content/body/div[9]/div[1]/blockquote[1]/p/strong/span, reference to undefined name 'fon': line 1, column 1 (click for details)
MindTouch.Deki.Script.DekiScriptUndefinedNameException: reference to undefined name 'fon': line 1, column 1 at MindTouch.Deki.Script.DekiScriptVar.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000] at MindTouch.Deki.Script.DekiScriptAccess.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env, Boolean evaluateProperties) [0x00000] at MindTouch.Deki.Script.DekiScriptAccess.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000] at MindTouch.Deki.Script.DekiScriptCall.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000] at MindTouch.Deki.Script.Dom.DekiScriptDomExpr.Evaluate (MindTouch.Deki.Script.DekiScriptEvalContext context, System.Xml.XmlNode parent, MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
(replace the "N"s with your Server ID number - e.g. s012345...)
When you take a phone away from the Local Area Network, you need to change the name to the following:
/content/body/div[9]/div[1]/blockquote[2]/p/strong/span, reference to undefined name 'fon': line 1, column 1 (click for details)
MindTouch.Deki.Script.DekiScriptUndefinedNameException: reference to undefined name 'fon': line 1, column 1
at MindTouch.Deki.Script.DekiScriptVar.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
at MindTouch.Deki.Script.DekiScriptAccess.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env, Boolean evaluateProperties) [0x00000]
at MindTouch.Deki.Script.DekiScriptAccess.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
at MindTouch.Deki.Script.DekiScriptCall.Evaluate (MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
at MindTouch.Deki.Script.Dom.DekiScriptDomExpr.Evaluate (MindTouch.Deki.Script.DekiScriptEvalContext context, System.Xml.XmlNode parent, MindTouch.Deki.Script.DekiScriptEnv env) [0x00000]
(e.g. s012345x...)
Notice the x after the Server ID, as in eXternal. It is required for all remote phones, except for office-to-office VPN tunnels.
The registrar string can be changed manually on each phone that will be used remotely. Following are step-by-step directions for each phone model:
If your phone keeps losing the "x" setting after the server ID when restarted:
Please see Troubleshooting - remote phones lose "x" after Server ID when obtaining config updates (farther down).
Polycom Phones
See these directions with photos and screenshots
For firmware revision 1.6.x or later:
Obtain the IP address assigned to the phone, and browse to it -
Press the “Menu” button
Select “Status…”
Select “Network…”
Select TPC/IP Parameters…”. The IP Address will be shown on the LCD display.
Browse to the IP address using your web browser. Example: http://192.168.1.100
Click on the “Lines” Link and authenticate
Username “Polycom” (case sensitive)
Password "456" (if this doesn't work, you may need to contact Fonality Support for your phone admin password).
Scroll down to the field labeled Address, in the line you want to use, for example Line 1
Change the
/content/body/div[9]/div[3]/ol/li[7]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
settings to
/content/body/div[9]/div[3]/ol/li[7]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number. In other words, add an "x" after the number, but before the dot.
Click the “Submit” button when finished changing these settings
The phone will automatically reset once the changes are made
See these directions with photos and screenshots
Fix the time/date:
Log in to the phone using steps 1-2 above.
Click the General tab.
Click the "Time" sub-tab.
Change the NTP server from "sNNNN.pbxtra.fonality.com" to "us.pool.ntp.org"
(or internationally, http://pool.ntp.org )
For earlier Polycom firmware revisions:
Obtain the IP address assigned to the phone, and browse to it
Press the “Menu” button followed by the “Select” soft key twice. The IP Address will be shown on the LCD display
Browse to the IP address using your web browser. Example http//192.168.1.100
Click on the “Registration” Link, and authenticate
Username “Polycom” (case sensitive)
Password “456”
Change the
/content/body/div[9]/div[3]/div[2]/ol/li[6]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
settings to
/content/body/div[9]/div[3]/div[2]/ol/li[6]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number
Click the “Submit” button when finished changing these settings
The phone will automatically reset once the changes are made
Softphone for PBX
The Softphone is available for Mac and PC users. The instructions below follow the PC-user's configuration steps, however these instructions are virtually identical for the Mac. For Mac users that do not own a two-button mouse, you can accomplish a "right-click" by holding down the control key on your Mac and then pressing your mouse button.
Right click on the screen of the softphone.
Click on "Settings".
Click on the "SIP Accounts" on the left side labeled"
/content/body/div[9]/div[4]/ol/li[3]/span, reference to undefined name 'fon': line 1, column 1 (click for details)
" where the Ns represent your server number.
In the field labeled "Domain" change the
/content/body/div[9]/div[4]/ol/li[4]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
settings to
/content/body/div[9]/div[4]/ol/li[4]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number.
Check the box labeled "Manual Override", circled red in the screenshot below.
Click the button labeled "Apply".
UNcheck the box labeled "Manual Override"
Click the button labeled "Apply" again.
Steps 5-7 may not make sense, but due to the code within the softphone client, you have to "trick" the application into realizing that it is currently being deployed remote to the Fonality server. You only have to do this once.
Yealink phones:
These directions are written for the Yealink T-20P, but the procedure and areas are similar for the higher models.
Use the Silver four-way arrow keys in order to scroll through the menu options.
Use the 'OK' key in the center to select.
Because the LCD is small, only one option will be displayed at a time. You must press the down arrow key in order to see more options available within a particular menu.
Assuming the phone is idle, as shown in the photo:
First, locate the IP Address of the Yealink phone in your network:
Click the Menu button on the IP Phone.
Press 1 key for Status
Note and Write down you IP Address assigned to your phone.
Now we need to access the Phone though the Web Interface:
Open a web browser (Firefox, IE, Chrome...)
in the address bar, enter the IP address of the phone and press the enter key
At the Authentication Required box, you need to enter the Username and Password for your Yealink device (username is "admin") If you do not have the password, please open a ticket with Fonality Support or call into Fonality Support for assistance logging in.
Click on the "Accounts" tab near the top of the website.
Find the "SIP Server" field. It looks something like "s12345.pbxtra.fonality.com", but may vary.
Add the letter "x" immediately after the number (server id), and before the period.
For example,
s12345.pbxtra.fonality.com
changes to:
s12345x.pbxtra.fonality.comClick the "confirm" button at the bottom of the webpage.
Here's a screenshot showing where to add the "x" on Yealink phones:
Naturally, replace "12345" with your Server ID. It may also be ".trixbox.fonality.com", if you have a six-digit server ID.
Aastra Phones
Obtain the IP address assigned to the phone, and browse to it
Press the "Options" key
Press the Down arrow on the buttons below the LCD screen to option "Network Settings" and press the right arrow to Enter
Enter 22222 and press the right arrow to Enter
Down arrow to "IP Address"
Browse to the IP address using your web browser. Example http//192.168.1.100
Enter authentication information
Username “admin” (case sensitive). Do NOT login with 'user' regardless of Aastra's documentation.
Password “22222”
Click on the "Global SIP" link
Change the
/content/body/div[9]/div[6]/ol/li[5]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
settings (Registrar AND Proxy Server) to
/content/body/div[9]/div[6]/ol/li[5]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number
Click the “Save Settings” button when finished changing these settings
The phone will will need to be restarted for the changes to take effect
Pull the power on the phone and plug it back in.
Grandstream Phones
GXP2000
In a web browser, from a computer connected to the same local network - Browse to the IP address of the phone. You can find the IP address on the phone LCD screen. Example:http://192.168.1.100
If prompted, enter the password: admin
Click on the "Account 1" link at the top of the page
For both the SIP server field and the Outbound Proxy field, change
/content/body/div[9]/div[7]/div[1]/p[4]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
to
/content/body/div[9]/div[7]/div[1]/p[4]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number
Click "Update"
Restart/reboot the phone
Your Grandstream GXP2000 is now ready for remote use.
Budget Tone 200
Browse to the IP address of the phone in your web browser. This can be found by pressing the menu key and going to option 2, and then pressing menu again.
Enter the password: admin
Click the "Account" link.
For both the SIP server field and the Outbound Proxy field, change
/content/body/div[9]/div[7]/div[2]/p[1]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
to
/content/body/div[9]/div[7]/div[2]/p[1]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number
Click "Update"
Reboot the phone
Your Grandstream Budget Tone 200 is now ready for remote use.
Cisco Phones
For historical reference - Cisco phone Support was discontinued circa 2011 (approximate date).
Reprogramming Cisco phones requires participation from Fonality Support, and the Cisco phone needs to be configured for remote use at the location of the
/content/body/div[9]/div[8]/p[2]/span/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
. Please contact Fonality Support for assistance. In preparation, you will need to determine the IP address used by the
/content/body/div[9]/div[8]/p[2]/span/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
, and prepare each Cisco phone as described below.
Press the “settings” Button
Press 9 for "Unlock Config"
Enter the MAC address (case sensitive). You can find this on a label on the bottom of the phone in the middle. It is 12 characters long containing numbers, and usually letters as well. Toggle between Number and Alpha as needed to enter the MAC Address. Press Accept when finished
Press 3 for "Network Configuration"
Enter 27 for "Alternate TFTP" and set it to YES, then Press "Save"
Press 3 for "Network Configuration" again, and enter 7 for "TFTP Server", then Press "Edit". Enter the IP address of the
/content/body/div[9]/div[8]/ol[1]/li[6]/span/span, reference to undefined name 'fon': line 1, column 1 (click for details)
server, then press Accept
Press Back twice
Disconnect the power cable from the phone, and then reconnect it
It might be necessary to clear the old settings from the phone, and to repeat the above process if the settings are not picked up from the
/content/body/div[9]/div[8]/p[4]/span/span, reference to undefined name 'fon': line 1, column 1 (click for details)
. If you need to clear the settings in the phone, use the following steps:
Press the “settings” Button
Press 9 for "Unlock Config"
Enter the MAC address (case sensitive). You can find this on a label on the bottom of the phone in the middle. It is 12 characters long containing numbers, and usually letters as well. Toggle between Number and Alpha as needed to enter the MAC Address. Press Accept when finished
Press 3 for "Network Configuration"
Enter 28 for "Erase Configuration" and set it to YES, then Press "Save"
Disconnect the power cable from the phone, and then reconnect it
Re-program the TFTP Server setting as described above
Contact Fonality Support for assistance with changing the configuration files on the
/content/body/div[9]/div[8]/p[5]/span/span, reference to undefined name 'fon': line 1, column 1 (click for details)
in accordance with your new extension numbers.
Snom Phones
For historical reference - not currently supported.
Obtain the IP address assigned to the phone, and browse to it.
Press the “<” key twice, followed by the soft key below the word “IPAdr” in your LCD display. This will show the IP address on the LCD display.
Browse to the IP address using your web browser. Example http//192.168.1.100
Click on the "Advanced" link on the left side of the screen
Change the "Update Policy" setting to "Never update, do not load settings"
Click "Save" to save this change
Click on the “Line 1” link on the left side of the screen
Change the
/content/body/div[9]/div[9]/ol/li[7]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
settings to
/content/body/div[9]/div[9]/ol/li[7]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number
Click the “Submit” button when finished changing these settings
Swissvoice Phones
For historical reference - not currently supported.
Obtain the IP Address assigned to the phone and browse to it
Press the “OK” button under the “Menu” display on the LCD
Scroll down to “Admin Settings” and press “OK” again
Click “OK” for “Current settings”
Click “OK” for “Network Configuration”
Press the down arrow button to scroll down one position to see the IP Address
Browse to the IP address using your web browser. Example http//192.168.1.100
Click on the “Administrator” button, and log in
Username admin
Password admin
Click on the “SIP configuration” link on the left side of the screen.
Change the
/content/body/div[9]/div[10]/ol/li[5]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
settings to
/content/body/div[9]/div[10]/ol/li[5]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
where the Ns represent your server number
Click the “Submit” button when finished changing these settings
Troubleshooting
Troubleshooting - remote phones lose "x" after Server ID when obtaining config updates
(Dedicated hosted and premise-based servers only)
If you would like to use remote phones on your server without a VPN connection you will need to change the default phone config download method. To do this go to the Options -> Settings page of your web admin panel and under +Phone settings change the value from 'via internet (Recommended)' to 'via LAN'.
We normally recommend Phone Config Download: "via Internet", but this workaround can be useful if remote phones keep losing the "x" after the Server ID.
Once this is done, reboot the remote phone. After the reboot you can access the phones web interface and follow the above instructions to configure the phone for remote use.
Be aware: This prevents the phone from loading config updates from ftp.pbxtra.com ("via Internet"). Again, this is a workaround for an issue that some users have reported where phones do not preserve local config settings. If your phones are working fine, you probably don't need to do this.
If a remote phone suddenly stops working or loses its extension
The most common cause of a phone "suddenly" failing to register with your
/content/body/div[10]/div[2]/p[1]/span[1], reference to undefined name 'fon': line 1, column 1 (click for details)
is due to configuration loss. The phone may lose it's configuration because it was powered off for too long, or a router gave it a different TFTP server IP than the
/content/body/div[10]/div[2]/p[1]/span[2], reference to undefined name 'fon': line 1, column 1 (click for details)
and the phone couldn't find a configuration on that TFTP server.
In this case, you must bring the phone back to the office in order to flash it and re-download configuration settings. For this reason, if a telecommuter lives many hours away from his/her office, we recommend a softphone as softphones do not suffer from configuration issues.
"Remote phones will not be able to connect to your PBX" error message
If viewing the Users/Extensions: extension status page, you may get a yellow banner claiming that remote phones are unable to connect. This function is currently disabled, and that error will display regardless of whether remote phones can reach the PBX or not. Disregard it for the time being, especially if your remote phones are working.
All other issues
Please see the Troubleshooting & FAQ section of our knowledgebase. In particular: