Security For Sip Accounts And Calls; Protocols And Ports; Figure 8: Configure Tls As Sip Transport - Grandstream Networks GXV3370 Security Manual

SECURITY FOR SIP ACCOUNTS AND CALLS

Protocols and Ports

By default, after factory reset, the SIP account 1 is active. Since the default local SIP port is 5060 for account
1, this allows user to make direct IP call even if the account is not registered to any PBX. If the user is not
using any account, it is recommended to uncheck the settings from web UI → Account → General Settings
→ Account Active to deactivate account 1.
Below are the ports/protocols used on GXV3370 SIP accounts. GXV3370 supports up to 16 SIP accounts.
•
SIP transport protocol:
The GXV3370 supports SIP transport protocol "UDP" "TCP" and "TLS". By default, it's set to "UDP". It's
recommended to use "TLS" so the SIP signaling is encrypted. SIP transport protocol can be configured
per SIP account under web UI → Account → Account x → SIP Settings. When "TLS" is used, we
recommend using "sips" instead of "sip" for SIP URI scheme to ensure the entire SIP transaction is
secured instead of "best-effort".
SIP TLS certificate, private key and password can be configured under GXV3370 web UI→System
Settings→Security Settings→SIP TLS.

Figure 8: Configure TLS as SIP Transport

GXV3370 Security Guide
P a g e | 10