Home
Overview
Log in
Configurations
Network
Advanced
MAC address
Dynamic DNS
Wireless
Local DNS Server
DHCP Server - Advanced
Security
High
Low
AltConf
SIP
SIP Switch
SIP Trunk
SIP Advanced
Certificates
Telephone Ports
Advanced
ADSL
E-mail
USB Web Server
Administration
Scheduler
Upgrade
Status
Network
Advanced
Firewall Rules
SIP Sessions
SIP Users
ADSL
USB Web Server
USB File Browser
Logs
Log Configuration
System Log
Firewall Log
SIP Log
Call Log
Help
Online User Manual
Using SIP and VoIP
Buy Extras
Device Information
Advanced SIP Settings
Far End Nat Traversal (FENT)
Requires license.
Buy
Evaluate
.
- Keep-alive packets interval UDP 
seconds TCP 
seconds
(to keep SIP communications alive for clients needing FENT)
- Type of keep-alive packets
SIP REGISTER
SIP OPTIONS
Detect endpoints behind same NAT (for shortest media path)
Authorized Users
Method
URI
Direction
Authentication User IDs
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
outbound
inbound
both
TLS settings
Requires license.
Buy
Evaluate
.
Act as TLS Client towards Server IP address(es)
Note: TLS is configured automatically on every network interface if any certificates has been installed in the unit. However if you want to override the default configuration, use the table below. The default configuration uses the first server certificate installed in the unit and all trusted certificates. Interop is enabled and MTLS is not.
Network interface
Certificate
 
Trusted certificates
Server methods
Client methods
MTLS
Interop.
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
et0 (195.67.1.152)
air3 (192.168.70.1)
air2 (192.168.60.1)
air (192.168.50.1)
et4 (192.168.30.1)
et1 (192.168.0.1)
none
All installed trusted cert
None (TLS client disabled)
Don't verify peer cert
Any
SSLv3 or TLSv1
TLSv1 (backwards compatible)
SSLv3
TLSv1 (strict)
Any (v2 hello)
SSLv3 or TLSv1 (v2 hello)
TLSv1 (v2 hello)
SSLv3 (v3 hello)
TLSv1 (TLSv1 hello)
SIP proxy
Maximum number of active sessions
(
Buy More
)
Maximum number of registrations per user
Timeout before registration expires
seconds
Call time out
seconds
Enable SIP session timer
Default ring timeout
seconds
Maximum ring timeout
seconds
SIP Server UDP port numbers
SIP Server TCP port numbers
SIP Server TLS port numbers
Static domain forwarding
Domain
Forward to
Modify URI
Authenticate
Allowed Codecs
Enable Codec Filtering
Codec Name
Media
Codec Manipulation
Add (out-of-band) DTMF payload type
in SDP when sending to IP address(es)
Proxy rules
Proxy default access limit
unlimited
limited
no access
IP Address
Subnet Mask
Access limit
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
unlimited
limited
no access
Advanced
SIP (3xx) redirection handling
Handled by the caller
Handled by this unit
TCP connection timeout
seconds
Max number of media streams per SIP request
Accept
Always record route
Music on Hold URI
RTP media port range
-
Allow multiple RTP media senders
Allow any source IP addresses
Allow only first received RTP source
Allow symmetric IP addresses only
Allow RTP in reverse direction
Reuse port numbers within same session
Reuse port numbers when changing media (e.g. T.38 FAX)
Spoof protection
RFC 3261 Loose routing
Disable change to TCP (large messages)
Disable username encoding (registrations)
Allow RFC 2069 authentication
Preferred QOP (authentication)
auth
auth-int
URI Encoding
Encryption
Escaping
Use registration
GRUU
Try make UDP messages smaller when exceeding
bytes
Hide Via headers on requests to IP addresses:
Ignore required extensions
Trusted IP addresses (treated as inside)
Monitor servers for failures
Time to cache server failures
seconds
Client registration interval
seconds
Failed registration retry timeout
seconds
Disable media based forwarding
Find SIP URI locally
Strip ICE SDP attributes
B2BUA re-INVITE end-to-end
Anonymous calls (B2BUA)
Don't send error response (408) on timeout
Strip route information from 180 responses
Trusted networks (RFC 3325)
Enable
Default Privacy Policy
IP address range
Begin
End
Protocol
Any
TCP
TLS
Any
TCP
TLS
Any
TCP
TLS
Any
TCP
TLS
Any
TCP
TLS
Any
TCP
TLS
Handling of Call Transfer
Enable B2BUA to be able to transfer calls:
Always
For clients not supporting "REFER"
For clients not supporting "replaces"
For clients with From-URI:
Wildcards (*, ? and !) allowed (e.g. *@supercall.com john.brown@mysip.com)
For clients with User-Agent field:
Wildcards (*, ? and !) allowed (e.g. "Super Phone*" RTC/1.2)
B2BUA can also be enabled for outgoing calls through Dial Plan with the
b2bua parameter, e.g. Forward to: pstn.gw.com;b2bua
Forwarding to SIP account in dial plan will always use B2BUA
Quality of Service
Set DiffServ bits in all SIP media streams
- audio
- video
- data
- signalling
- RTSP
- TR-069
Strip DiffServ bits from other applications
Upstream prioritization (QoS)
Enable
- Link capacity
kbps
Internal Task Prioritization
Voice (media) quality vs call control
Same priority
Prioritize voice (media)
Prioritize call control
Call Admission Control
Deny calls if any of the following is exceeded:
- Upstream traffic
kbps
- Downstream traffic
kbps
- Audio calls
- Video calls
SIP Switch