Upload Certificate Files; Configure Firewall Rules; Add A Firewall Rule - Yeastar Technology TG100 User Manual

Upload Certificate Files

You can create TLS VoIP trunks and accounts on TG gateway. To make the TLS
trunks or accounts work, you need to upload certificates to TG gateway.
If you have enabled TLS Verify Client (Gateway > VoIP Settings > SIP Settings), you
need to upload the TLS certificates on TG gateway.
Procedure
1. Navigate to System > Security Center > Certificates to upload your certificates.
2. Upload trusted certificate.
Trusted certificate is a CA certificate. The connected PBX should upload the same
certificate.
a. Click Upload Certificate, set Type to Trusted Certificate.
b. Click Choose File to select the file from your local PC.
c. Click Save to start uploading.
You can see the certificate appear on Trusted Certificate list.
3. Upload gateway certificate.
Gateway certificate is made for the TG gateway.
a. Click Upload Certificate, set Type to Gateway Certificate.
b. Click Choose File to select the file from your local PC.
c. Click Save to start uploading.
You can see the certificate appear on Gateway Certificate list.
Reboot the TG gateway to take effect.
4.

Configure Firewall Rules

You can configure firewall rules for the TG gateway to protect the system from being
attacked.
Important: Back up the system configuration before you start configuring firewall, or
you may fail to log in the system with improper firewall configurations.

Add a Firewall Rule

Procedure
1. Navigate to System > Security Center > Firewall Rules, click Add Rule.
2. Set a Name for the rule.
3. (Optional) Enter notes for the rule in the Description field.
4. Choose the desired Protocol.
5. Enter a port range in Port fields. The end port must be equal to or greater than
start port. If you want to set the rule for a specific port, enter the same port value in
the two Port fields. For example, 5060:5060 stands for port 5060.
TG100 User Guide
66/75