Table of Contents
Advertisement
NETWORK SECURITY
NETWORK SECURITY
FIREWALL SETUP
Firewall Ports to Open
All Systems
SIP Trunks and Stations
HTTPS
Unifier
Meeting
Net Server
10-2
After the IPedge system is installed, the SIP Trunks and/or Remote IP
Telephones working, it is the responsibility of the installer and system user
to setup the firewall to help prevent unauthorized access.
While this can be accomplished in many ways one basic method is using
lists. For example; Cisco devices can be configured using ACL's (Access
control lists) and, in Sonicwall by setting up rules to Deny or allow specific
IP addresses, or other means in other firewalls.
For example; the firewall configuration could be set to only allow specific
IP's. Contact your SIP Provider for a list of the IP's their Signaling and
Media will use. For a remote IPT add the static IP to the safe list, if the
remote IPT is a dynamic IP you could list a range ips for use by the IPT, or
even better require the use of a hardware VPN for all remote phones and
software VPN for softphones that are roaming.
Any specific programming of firewall rules to secure access to the
network and IPedge server are the responsibility of the installing dealer
and/or customer and vary by the needs and level of protection determined
by the customer's IT department. Toshiba technical support does not
assume responsibility to provide specific commands or to verify a network
or specific IPedge server is secure.
This section discusses firewall setup. Be sure that all of the port numbers
from Step 2 above are programmed into the fire wall, pointing to the
IPedge server IP address.
The following lists are the firewall ports that must be open for the IPedge
system to function behind a firewall.
These firewall ports must be open for every system:
•
1718 to 1719 UDP (Remote IP Telephone set registration)
•
21000 to 22999 UDP (Remote IP or SIP telephone audio)
•
2944 to 2944 TCP (Remote IP Telephone MEGACO signaling)
•
80 TCP (Redirects to 8080)
•
8080 TCP (Enterprise Manager)
•
10000 TCP (Webmin)
•
5060 UDP (SIP trunks or SIP telephones outside the firewall)
•
443 TCP and 8443 TCP (HTTPS)
•
1100 to 1105 TCP (Systems connecting with unifier)
•
8444 TCP (Meeting)
•
1935 TCP (Meeting)
•
1945 TCP (Meeting)
•
443 TCP (Meeting and/or HTTPS)
•
8768 TCP (Net Server)
Firewall Ports to Open
Installation Manual
August, 2011
Hide quick links:
Advertisement
Table of Contents
