support wiki

helpful humans at 423-456-6700

User Tools

Site Tools


Sidebar

System Setup
Getting Started
Setup Wizard
Porting Numbers
Caller ID
Special Projects

Networking
Network Introduction
Recommended Equipment
Ideal Network Setup
Firewall/Network Configuration
  Routers That Should Not Be Used
Switches
Ubiquiti ER X Configs
How To Disable SIP ALG
Networking Disasters
OpenVPN on Grandstream Phones
Port Forwarding / External Remote Phones

Customer Admin Portal
Login
Dashboard
Coms
  Fax
  SMS/Text
  E-Mail
Configuration
  Basic Mode
  Extensions-Adding
  Extensions-Function
  Groups
  Receptionists
  Schedule
  Hold Music
  Advanced Mode
  PA Ring Tone
  Recordings
  Keys
  Tricks
My Services
  Numbers
  Lines
  International Calling
  e911
  Conference
  Backup
  Call Recordings
  Phonebook
My Account
  Overview
  Account Info
  Options
  Payment
  Wallet
  Reports

Functions & Advanced Features
Schedule Override
External Storage: USB
Hold vs Park
Hunt Groups
Paging
Line Emulation
Relay/Door/Alarm Control
Feature Code List
Voicemail
Grandstream Wave
Zoiper

Hardware
Hello Hub V2
Hello Hub Nano - Cloud Connector
Supported Phones (Auto-Config)
Grandstream HT801/802 Tricks
Pairing Instructions for DP750/752
Grandstream WP820
PA Speaker (SIP) Configuration

Deprecated
Hello Hub V1
Hello Hub V1 Battery Removal
Manual Config Phones

Advanced
Troubleshooting
Reliability
Switching Loops
Email Notes

Policies
Payment Policy
Cancellation

System Variants
System & Hardware Variants

Required
Terms and Conditions
Software Licensing

Useful
Blog and Rants
HIPAA
Recording Phone Calls & Conversations

Menu

firewall-network-config

Firewall/Network Configuration

The ring-u average customer has a consumer-oriented router and everything “just works.”
This page is for customers with advanced needs and professional networking gear and experience.
Also take a look at:
Ideal Network Setup
Routers with Known Issues
Networking Disasters

Basic level

If your router, firewall or access points have rules for blocking VoIP traffic, often called “SIP ALG” or “SIP Traffic” and you are having issues, turn them off. You might have to create a rule that “allows UDP traffic” outbound. Your ring-u Hello Hub must be allowed to communicate via UDP and TCP to the internet in order to work. How to Disable SIP ALG on Popular Routers

Advanced level

Some firewalls require specific lists of allowed IP addresses and ports to connect to. This can get tricky, and the IP addresses involved my change. If your network security needs are high, consider a separate network (physical or VLAN) for your phone system. For basic system control and operations, the following are fairly consistent with most configurations:

IPTypePort(s)
50.116.32.101TCP443,2211ring-u operations
2600:3c02::f03c:91ff:fe24:fdf0TCP443,2211ring-u operations
192.76.120.10UDP,TCP5060-5080Upstream Provider SIP
192.76.120.66UDP,TCP5060-5080,3478,5349Upstream Provider SIP/STUN&TURN
52.112.66.139UDP,TCP5060-5080Upstream Provider SIP
2603:1037:0:c::fUDP,TCP5060-5080Upstream Provider SIP

If you are using certain advanced configurations for remote extensions/phones you may need to add. Ask if you need this one, it is not common.

IPTypePort(s)
198.74.53.36UDP,TCP5060-5080VPN
2600:3c02::f03c:91ff:fe30:7233UDP,TCP1194VPN

Due to the nature of SIP/VoIP traffic, actual call connections use a variety of UDP ports. It's best to allow all outbound UDP traffic from your Hello Hub. In this example: 192.168.1.210 is a Hello Hub and three calls in a row

 192.168.1.210:14422 to 64.16.248.238:19192
 192.168.1.210:25250 to 64.16.248.98:31282
 192.168.1.221:5088 to 52.112.67.11:24251
 

Specialized Firewalls

For higher end firewalls, please observe manufacturers' best practices.
Untangle settings
SonicWall settings
Cisco Meraki settings

Need more?

ring-u was founded by some very technical folks, please contact tech support if you need specific help with your network configuration.

firewall-network-config.txt · Last modified: 2022/11/17 17:00 by jim