Recommended Router and Firewall Setting

Recommended Router and Firewall Setting

General Configuration

WARNING: It is recommended to consult your IT, MSP (Managed Service Provider), or another network professional when configuring advanced network settings or devices.

While resolving any network issues, we also recommend that Bandwidth Management/Traffic Shaping policies prioritizing VoIP traffic are configured and tested on your router/firewall.

Settings to Disable

  • SIP ALG (Application Layer Gateway) functions such as SIP Transformations, SIP Application Helpers, SIP Normalization, etc..
  • SPI (Stateful Packet Inspection)
  • AV Client Enforcement on any IP assigned to a phone
  • Content Filtering on any IP assigned to a phone

Settings to Enable

  • Bandwidth Management/Traffic Shaping (See below for a list of our network blocks and bandwidth requirements)
  • Default UDP session timeout to 300 seconds
  • Consistent NAT (Sonicwall)
  • Load balancing policy configured for ingress and egress of phones on same WAN interface only. (If applicable)
  • Inbound and outbound traffic on ports and subnets listed below
  • DNS resolution for the phones

Subnet and Port Configuration

Primecall Public Subnets

  • 199.71.209.0/24
  • 24.227.249.0/25
  • 72.249.136.32/28
  • 206.123.122.32/27
  • 212.69.157.32/27
  • 40.143.31.64/27
  • 45.51.5.0/24

Ports - Primecall Platform

  • 5060-5062 UDP - SIP
  • 20,000-40,000 UDP - RTP
  • 80, 443 TCP - HTTP/HTTPS
  • PrimecallMEETING - TCP and UDP
    • 54.188.133.147:3443
    • 3.130.158.184:3443
    • 35.183.150.146:3443
  • Text To Speech Services - TCP and UDP
    • 54.149.243.27:8000
    • 35.175.185.150:8000
    • 54.149.243.27:3001
    • 35.175.185.150:3001
  • PrimecallWEB PHONE
    • 9002 - TCP - websockets
  • Portal Dynamic Updates
    • 8001 - TCP

Ports - Enswitch 1 and 2 Platforms

  • 5060-5062 UDP - SIP
  • 10,000-20,000 UDP - RTP
  • 80, 443 TCP - HTTP/HTTPS

DHCP VLAN Option

Option 132: Set Voice VLAN ID

  • This only works for yealink brand phones and needs to be made as a custom option on the DHCP Server.
  • Type = String (ASCII)
  • Value = 'VLANTAG' for example '20' for VLAN 20
  • This DHCP option should be applied to your native DHCP sever so that the phones receive the configuration when first plugged in. 
    • It may also be applied to the voice VLAN, but is not required.

Bandwidth Requirements

Voice-only applications utilize G.711 U-Law as the primary codec and require 87.2 Kbps of bandwidth per active call. We've found a good rule of thumb is to round the requirement up to 100Kbps to account for signaling and overhead. 

For example…

A 10Mbps/1Mbps ISP connection that is solely dedicated to the phones would support 10 concurrent phone calls.

router settingsconsistent natsip algsettingsconfigurefirewall settings
    • Related Articles

    • Recommended Fortinet Firewall Settings

      Please pay particular attention to spaces and dashes in the CLI based steps, or you may receive error warnings. From the Fortinet Appliance Command Line Interface Remove SIP Helper In the Command Line Interface (CLI) run the following commands: ...
    • Recommended Fortinet Firewall Settings

      Please pay particular attention to spaces and dashes in the CLI based steps, or you may receive error warnings. From the Fortinet Appliance Command Line Interface Remove SIP Helper In the Command Line Interface (CLI) run the following commands: ...
    • Recommended Fortinet Firewall Settings

      Please pay particular attention to spaces and dashes in the CLI based steps, or you may receive error warnings. From the Fortinet Appliance Command Line Interface Remove SIP Helper In the Command Line Interface (CLI) run the following commands: ...
    • Recommended Fortinet Firewall Settings

      Please pay particular attention to spaces and dashes in the CLI based steps, or you may receive error warnings. From the Fortinet Appliance Command Line Interface Remove SIP Helper In the Command Line Interface (CLI) run the following commands: ...
    • Recommended Router and Firewall Settings

      General Configuration WARNING: It is recommended to consult your IT, MSP (Managed Service Provider), or another network professional when configuring advanced network settings or devices. While resolving any network issues, we also recommend that ...