This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to port forward SIP Server for VOIP?

EMB 7 DENR over 4 years ago

I want to forward my SIP server online with specific port but having trouble doing it.

I am trying to set up IP phones for other branches using public IP.

I have opened specific port (8085) for the web console. Also opened the VOIP port 5060, RTP ports 10000-50000.

Tried to enable and disable SIP module.

When tried to access web console using my public IP with port 8085, it's not going through.

Anyone?

XG230

(SFOS 17.5.1 MR-1)

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 4 years ago

First of all, Web Access Port 8085 should work fine with a DNAT Rule ( Business Application Rule).

https://community.sophos.com/kb/en-us/122976

Can you share a Screenshot of this rule?

I am not quite the "pro" in VOIP Traffic. But a DNAT Rule in XG can include multiple service ranges.

So this should also be possible, but i have a big security issue in my head about this. I guess, you should contact your VOIP Provider, if this is the "Correct" approach.

XG is not a SBC. https://en.wikipedia.org/wiki/Session_border_controller

There is a KBA about VOIP: https://community.sophos.com/kb/en-us/127785

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 EMB 7 DENR over 4 years ago in reply to LuCar Toni

Already talked to the VOIP provider and the only thing we need to do is open those ports which I've done.

You can also see the screenshot of the rule above.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to EMB 7 DENR

Hi,

would you like to try an experiment?

Make an outgoing rule that is source LAN, PABX, destination WAN, SIP provider, allow 5060, 5061 and your additional port range, log, MASQ.

See if that allows outgoing and incoming traffic?

Ian

XG115W - v20 GA - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 EMB 7 DENR over 4 years ago in reply to rfcat_vk

Yeah, tried that but not working.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 EMB 7 DENR over 4 years ago in reply to rfcat_vk

Yeah, tried that but not working.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 4 years ago in reply to EMB 7 DENR

Hi,

sounds like you have some missing ports in your configuration. Try changing the rule to source LAN, PABX, destination Wan, ANY, allow all, log. Then check what ports are being used in log viewer using a filter on the rule number.

Ian

XG115W - v20 GA - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 EMB 7 DENR over 4 years ago in reply to rfcat_vk

Issue resolved.

My configuration was just fine.

I just found out lately that my other ISP was having connection problem.

My first configuration was fine. I opened port 8085 for my web access,

port 5060 for voice, then RTP port range 10000-12000.

All of opened ports were configured for both TCP and UDP transmissions.
Cancel
Vote Up 0 Vote Down

Cancel