[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
IP security (filtering)
Author Message
Com1 Offline
Junior Member
**

Posts: 2
Joined: Jul 2013
Reputation: 0
Post: #1
IP security (filtering)
Hi,

We have several phones which are at remote locations using the internet to connect to our customers PBX. Unfortunately we are not able to configure (SSL) VPN between the remotes and the hub site.

On the hub site (PBX) we configured IP filtering to make sure we only allow SIP sessions between the remotes and the hub.

On the remote sites we are only able to configure filtering if we put a firewall between the internet and the phone. We agree that this is the preferred solution, but there must be a simpler way of doing this. For now we only have a NAT configuration.

We have several remote sites which are under "attack" quite often and we want to filter any traffic which is not coming from our PBX.

Is it possible to configure an IP filter on the Yealink phones which allows for local management (private subnets) and one or more public IP addresses?

To our opinion this would be a very simple but effective way of securing the remote phones.

Best regards,

Bas
07-13-2013 05:17 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink Support Offline
Administrator
*******

Posts: 2,684
Joined: Dec 2012
Reputation: 24
Post: #2
RE: IP security (filtering)
Hi Bas,
Do you mean you just want the phone to accept the message only from PBX?
If yes, please let us know what's the model and firmware are you using?
If you are using our latest T2X V70 firmware, please use below auto provisioning parameter to enable this feature.
--------------------------
#!version:1.0.0.1
account.1.sip_trust_ctrl = 1
--------------------------

If you are using V61 or V60 firmware, please use this parameter:
--------------------------
[ account ]
path = /config/voip/sipAccount0.cfg
SIPTrustCtrl = 1
--------------------------

Thanks.
07-15-2013 03:42 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Com1 Offline
Junior Member
**

Posts: 2
Joined: Jul 2013
Reputation: 0
Post: #3
RE: IP security (filtering)
(07-15-2013 03:42 PM)Yealink Support Wrote:  Hi Bas,
Do you mean you just want the phone to accept the message only from PBX?
If yes, please let us know what's the model and firmware are you using?
If you are using our latest T2X V70 firmware, please use below auto provisioning parameter to enable this feature.
--------------------------
#!version:1.0.0.1
account.1.sip_trust_ctrl = 1
--------------------------

If you are using V61 or V60 firmware, please use this parameter:
--------------------------
[ account ]
path = /config/voip/sipAccount0.cfg
SIPTrustCtrl = 1
--------------------------

Thanks.

Hi,

Thanks for your quick response. We are using T26 and T28's with 3CX in this setup. Is the v70 firmware also compatible with 3CX?
We will check this config as soon as possible!

Is this a setting that can only be changed in a configfile or will there also be a possibility to change this using the webinterface?

Regards,

Bas
(This post was last modified: 07-16-2013 04:12 AM by Com1.)
07-16-2013 04:11 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink Support Offline
Administrator
*******

Posts: 2,684
Joined: Dec 2012
Reputation: 24
Post: #4
RE: IP security (filtering)
Hi Bas,
1.Yes, you can see in our website:
http://www.yealink.com/SupportDownloadfi...4&flag=142
2.70.0.103 (Supported by 3CX Phone System)
2. Currently this setting can be only config by the config file, sorry.
Thanks.
07-16-2013 03:28 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
freddyco@gmail.com Offline
Freddy
**

Posts: 2
Joined: May 2013
Reputation: 0
Post: #5
RE: IP security (filtering)
Hello,

For the phone only accept the message notify only from PBX (registered). I tried the parameter but does not work. In the version of firmware V 9.71.0.140 for model T-20p.

There is another parameter to be added?

# version: 1.0.0.1
account.1.sip_trust_ctrl = 1



(07-16-2013 03:28 PM)Yealink Support Wrote:  Hi Bas,
1.Yes, you can see in our website:
http://www.yealink.com/SupportDownloadfi...4&flag=142
2.70.0.103 (Supported by 3CX Phone System)
2. Currently this setting can be only config by the config file, sorry.
Thanks.
11-22-2013 11:21 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink Support Offline
Administrator
*******

Posts: 2,684
Joined: Dec 2012
Reputation: 24
Post: #6
RE: IP security (filtering)
Hi freddyco@gmail.com,

You can also disable the ip call option.
----------------------------------------------------------------------------------
#!version:1.0.0.1

#Enable or disable the phone to dial the IP address directly; 0-Disabled, 1-Enabled (default);
features.direct_ip_call_enable = 0
----------------------------------------------------------------------------------
11-25-2013 05:59 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread:

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication