/
Ports used on your PBX

Ports used on your PBX

 

 

The table below outlines all the ports used on your PBX that you need to open on your hardware firewall if you want outside users to have access to things. These are default port assignments for new installs, but most can be changed by the user post install. Legacy versions may have used different default port numbers (notably http provisioning) and the original port numbers remain unaffected when the system is upgraded.

 

→ For a list of IPs your PBX will need to communicate with, please see Allowed IPs for PBXact Upgrade

PBX Admin Access

PORT

TCP/UDP

PURPOSE

CHANGING PORT

SECURITY

NOTES

PORT

TCP/UDP

PURPOSE

CHANGING PORT

SECURITY

NOTES

22

TCP

SSH Console

This can only be changed inside from inside Linux CLI and not recommended to be changed.

Not recommended to open this up to untrusted networks.

Port used to allow SSH to the PBX from the outside world.

80 FreePBX

2001 PBXact

TCP

PBX GUI HTTP (Non HTTPS)

Can change this port inside the PBX Admin GUI > System Admin Module > Port Management section.

Not recommended to open this up to untrusted networks.

Used to access the PBX Admin GUI

443

TCP

PBX GUI HTTPS

Can change this port inside the PBX Admin GUI > System Admin Module > Port Management section.

Not recommended to open this up to untrusted networks.

Used to access the PBX Admin GUI with SSL encryption

1194

UDP

OpenVPN server

Admin GUI → System Admin Pro→ VPN Server → Settings tab → Server Port

Can open to untrusted hosts

Used to connect OpenVPN clients to PBX VPN Server.

 

PBX SIP and IAX Communication

PORT

TCP/UDP

PURPOSE

CHANGING PORT

SECURITY

NOTES

PORT

TCP/UDP

PURPOSE

CHANGING PORT

SECURITY

NOTES

5060

UDP

chan_PJSIP Signaling

Can change this port inside the PBX Admin GUI SIP Settings module.

Not recommended to open this up to untrusted networks.

Standard Port used for chan_PJSIP Signalling.

5061

 

chan_PJSIP
Secure Signaling

Can change this port inside the PBX Admin GUI SIP Settings module.

Not recommended to open this up to untrusted networks.

Secure Port used for chan_PJSIP Signalling.

5160

UDP

chan_SIP Signaling

Can change this port inside the PBX Admin GUI SIP Settings module.

Not recommended to open this up to untrusted networks.

Standard Port used for chan_SIP Signalling.

5161

 

chan_SIP
Secure Signaling

Can change this port inside the PBX Admin GUI SIP Settings module.

Not recommended to open this up to untrusted networks.

Secure Port used for chan_SIP Signalling.

10000-20000

UDP

RTP for SIP

Can change this port inside the PBX Admin GUI SIP Settings module.

Safe to open to the outside world and is required by most SIP Carriers as your RTP traffic can come from anywhere.

Used for the actual voice portion of a SIP Call.

4569

UDP

IAX

Can change this port inside the PBX Admin GUI IAX Settings module.

Not recommended to open this up to untrusted networks.

Used for IAX protocol and trunking

4000-4999

UDP

FAX UDPTL

Not configurable in the GUI, on by editing custom conf file.

 

Used for T38 fax media

PBX User Control Panel (UCP)

PORT

TCP/UDP

PURPOSE