Differences

This shows you the differences between two versions of the page.

--- firewall-network-config [2022/06/10 18:07] – created jim
+++ firewall-network-config [2024/10/28 14:04] (current) – [Specialized Firewalls] jim
@@ Line 1: / Line 1: @@
 ====== Firewall/Network Configuration ======
-The **ring-u** average customer has a consumer oriented router and everything "just works". This page is for customers with advanced needs and professional networking gear and experience. Also take a look at: [[networkingdisasters|Networking Disasters]]
+The **ring-u** average customer has a consumer-oriented router and everything "just works."\\
+This page is for customers with advanced needs and professional networking gear and experience.\\
+Also take a look at:\\
+[[ideal-network-setup|Ideal Network Setup]]\\
+[[routersthatshouldnotbeused|Routers with Known Issues]]\\
+[[networking-disasters|Networking Disasters]]\\
 ===== Basic level =====
-If your router, firewall or access points have rules for blocking VoIP traffic, often called "SIP ALG" or "SIP Traffic" and you are having issues, turn them off. You might have to create a rule that "allows UDP traffic" outbound. Your **ring-u** Hello Hub must be allowed to communicate via UDP and TCP to the internet in order to work.
+If your router, firewall or access points have rules for blocking VoIP traffic, often called "SIP ALG" or "SIP Traffic" and you are having issues, turn them off. You might have to create a rule that "allows UDP traffic" outbound. Your **ring-u** Hello Hub must be allowed to communicate via UDP and TCP to the internet in order to work. [[disablesipalg|How to Disable SIP ALG on Popular Routers]]
 ===== Advanced level =====
-Some firewalls require specific lists of allowed IP addresses and ports to connect to. This can get tricky, and the IP addresses involved my change. If your network security needs are high, consider a separate network (physical or VLANS) for your phone system. For basic system control and operations, the following are fairly consistent with most configurations:
+Some firewalls require specific lists of allowed IP addresses and ports to connect to. This can get tricky, and the IP addresses involved my change. If your network security needs are high, consider a separate network (physical or VLAN) for your phone system. For basic system control and operations, the following are fairly consistent with most configurations:
 ^IP^Type^Port(s)^Description
@@ Line 27: / Line 32: @@
 .168.1.221:5088 to 52.112.67.11:24251
+=====Specialized Firewalls=====
+For higher end firewalls, please observe manufacturers' best practices.\\
+**Untangle** [[https://support.edge.arista.com/hc/en-us/articles/202671703-VoIP-Deployment-Models-and-Troubleshooting-Guide|settings]]\\
+**SonicWall** [[https://www.sonicwall.com/support/knowledge-base/how-to-configure-voip-to-use-any-voip-phone-system-best-practices/210615132522720/|settings]]\\
+**Cisco Meraki** [[https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/VoIP_on_Cisco_Meraki%3A_F.A.Q._and_Troubleshooting_Tips|vlan settings]] and [[https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Block_Listing_and_Allow_Listing_Clients|allow list settings]]\\
+**pfSense** [[https://docs.netgate.com/pfsense/en/latest/recipes/nat-voip-phones.html|settings 1]] and [[https://docs.netgate.com/pfsense/en/latest/recipes/nat-voip-pbx.html|settings 2]]
 ===== Need more? =====
 **ring-u** was founded by some very technical folks, please contact tech support if you need specific help with your network configuration.