General Configuration Steps - Fortinet FortiGate Voice 4.0 MR1 Administration Manual

General configuration steps

General configuration steps
18
Figure 3: Example Branch Office network configuration
Branch Office
Internal network
PCs with SIP soft phones
and FortiFones
Subnet: 172.20.120.0
Extension Range 6000 - 6999
PC
FortiFone
PC
FortiFone
PC
NAT device
FortiFone
behind a NAT
device
This section describes:
• General configuration steps
• Connecting the FortiGate Voice unit
• Configuring basic FortiGate Voice network and UTM settings
• Configuring network settings for the devices on the Internal network
• Configuring the FortiGate Voice PSTN and PBX settings
• Configuring the FortiFones on the internal network
• Adding extensions and configuring FortiFones for users behind a NAT device
1 Connect the FortiGate Voice unit to the Internet, the internal network and the PSTN.
2 Configure FortiGate Voice unit network and UTM settings.
The network configuration includes enabling the SIP Traffic option on the internal and
wan1 interfaces. You must enable SIP traffic on these interfaces to accept and process
SIP calls. No other special network configuration, firewall policies, or routing is required
for the FortiGate Voice to accept and process SIP calls.
Note: You do not have to add SIP firewall policies to enable SIP traffic for the FortiGate
Voice unit to function as a PBX. Also, with PBX functionality enabled, you cannot apply
FortiGate SIP application control features to SIP traffic received by FortiGate Voice
interfaces for which you have enabled the SIP Traffic option.
This example also describes how to configure the FortiGate Voice as a DHCP server
and DNS server for the branch office internal network. As a DHCP server the FortiGate
Voice can supply network configuration settings for the PCs and FortiFones on the
internal network.
3 Configure network settings for the PCs on the Internal network.
4 Configuring the FortiGate Voice PSTN and PBX settings.
Example FortiGate Voice branch office configuration
PSTN
a/b - wire
fxo1
SIP
SIP Trunking
LAN internal
wan1
172.20.120.10
192.168.10.10
FortiGate Voice-80C
FortiGate Voice Version 4.0 MR1 Administration Guide
Remote Users
with FortiFones or
SIP soft phones
Extension range
6000 - 6999
Remote
FortiGate unit
in NAT mode
external
192.168.40.10
SIP Trunking
Internet
WAN WAN
VoIP Provider
IP: 192.168.20.10
01-410-112851-20100601
http://docs.fortinet.com/
Head Office
IP: 192.168.30.10
Extention Range
2000 - 2999
• Feedback