support wiki

helpful humans at 423-456-6700

User Tools

Site Tools


firewall-network-config

Firewall/Network Configuration

The ring-u average customer has a consumer-oriented router and everything “just works.”
This page is for customers with advanced needs and professional networking gear and experience.
Also take a look at:
Ideal Network Setup
Routers with Known Issues
Networking Disasters

Basic level

If your router, firewall or access points have rules for blocking VoIP traffic, often called “SIP ALG” or “SIP Traffic” and you are having issues, turn them off. You might have to create a rule that “allows UDP traffic” outbound. Your ring-u Hello Hub must be allowed to communicate via UDP and TCP to the internet in order to work. How to Disable SIP ALG on Popular Routers

Advanced level

Some firewalls require specific lists of allowed IP addresses and ports to connect to. This can get tricky, and the IP addresses involved my change. If your network security needs are high, consider a separate network (physical or VLAN) for your phone system. For basic system control and operations, the following are fairly consistent with most configurations:

IPTypePort(s)
50.116.32.101TCP443,2211ring-u operations
2600:3c02::f03c:91ff:fe24:fdf0TCP443,2211ring-u operations
192.76.120.10UDP,TCP5060-5080Upstream Provider SIP
192.76.120.66UDP,TCP5060-5080,3478,5349Upstream Provider SIP/STUN&TURN
52.112.66.139UDP,TCP5060-5080Upstream Provider SIP
2603:1037:0:c::fUDP,TCP5060-5080Upstream Provider SIP

If you are using certain advanced configurations for remote extensions/phones you may need to add. Ask if you need this one, it is not common.

IPTypePort(s)
198.74.53.36UDP,TCP5060-5080VPN
2600:3c02::f03c:91ff:fe30:7233UDP,TCP1194VPN

Due to the nature of SIP/VoIP traffic, actual call connections use a variety of UDP ports. It's best to allow all outbound UDP traffic from your Hello Hub. In this example: 192.168.1.210 is a Hello Hub and three calls in a row

 192.168.1.210:14422 to 64.16.248.238:19192
 192.168.1.210:25250 to 64.16.248.98:31282
 192.168.1.221:5088 to 52.112.67.11:24251
 

Specialized Firewalls

For higher end firewalls, please observe manufacturers' best practices.
Untangle settings
SonicWall settings
Cisco Meraki vlan settings and allow list settings
pfSense settings 1 and settings 2

Need more?

ring-u was founded by some very technical folks, please contact tech support if you need specific help with your network configuration.

firewall-network-config.txt · Last modified: 2024/10/28 14:04 by jim

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki