Firewalls And Sip - Cisco SPA-841 - Sipura VoIP Phone Administration Manual

Configuring Your System for ITSP Interoperability

Firewalls and SIP

STEP 4
STEP 5
STEP 6
STEP 7
Firewalls and SIP
SPA9000 Voice System Administration Guide
To collect information about the type of NAT your router is using, complete the
following tasks:
a. Click Voice tab > SIP.
b. Scroll down to the NAT Support Parameters section.
c. From the STUN Test Enable field, choose yes.
To enable SIP signalling, complete the following task:
a. Click Voice tab > Line
b. In the SIP Settings section, choose full from the SIP Debug Option field.
Click Submit All Changes.
View the syslog messages to determine whether your network uses symmetric
NAT. Look for a warning header in the REGISTER messages, such as Warning: 399
spa "Full Cone NAT Detected."
To enable SIP requests and responses to be exchanged with the SIP proxy at the
ITSP, you must ensure that your firewall allows both SIP and RTP unimpeded
access to the Internet.
•
Make sure that the following ports are not blocked:
•
SIP ports—UDP port 5060 through 5063, which are used for the ITSP line
interfaces
•
RTP ports—16384 to 16482
•
Also disable SPI (Stateful Packet Inspection) if this function exists on your
firewall.
N
, where N represents the line interface number.
3
54