sundance-communications.com/forum Forums TDM Business Telephone Systems Inter-Tel Telephones & Systems 5400 - Making external IP phones work...

Where can I find an exaustive list of need protocols, ports and settings for a 5400 to allow internal and external IP phones to both access the switch effectively.

Thanks!

It can be found in the Installation Manual. Basically a 5400 will require 2 static LAN IPs, and two static NAT IPs if phones are to connect from public network. Each will require that the following ports be open:
TCP5566
UDP5567
UDP6004-7039
For management add:
TCP80
TCP4000
Protocol wise, Inter-Tel VoIP uses proprietary signalling (Unless using SIP which is rarely used on this switch). Vocoder support is G.711, G.729A and G.729 with VAD.

Thank you Chris!

I believe you have pointed to what the vendor's installer and I did not see was missing - the NAT IP addresses. We had the two LAN IP ones.

Let me clarify - for each IP connection, I need to put in a public IP, say 63.123.234.56 and .57 for each respectively under the "NAT IP Address".

Eh?

Yes that is correct. You will also need to make sure that for each endpoint that wishes to connect from outside that NAT type be set to either AUTO or NAT. Auto would be a safe bet most of the time. This instructs the 5400 to communicate to the endpoint the proper IP as the destination for packets being sent from the phone; no to be confused with source/destination at Layer 3. It is what allows the system to deal with near and far end NAT/NAT Traversal.

Ok. It appears they are all set to Auto.

Tomorrow, I will swing around and get my phone and try it from out side again.

Thanks!

Well, I got the phone. I am where I was before.

The phone "sees" the switch - connects - displays the correct extension number and user name - I can dial - here ringing - but NO audio.

I cannot here any greatings or the voice of someone I call. They cannot here me.

Ideas?

This unfortunately is a little weird on the 5400. Call control is handled by the IP on the base server IP and audio is handled by the expansion card. Inter-tel has changed port usage several times from 5004 and up on the Axxess to 6004 and up on the 5000. The expansion board defaults to UDP port 6604 and depending on the number of remote phones would determine how much of a range you need. The first call would be 6604, the second 6606 and so on. The simplest test would be to any any you firewall on that 1 to 1 NAT to verify you 5000 is set up correctly and then lock the firewall back down with the appropriate ports.

I believe Chapter 5 of the IP devices manual shows all the ports required.

From the manual: By default, IP devices use the following ports. The items in bold are the minimum configuration
of ports that must be routed through firewalls and proxies.
Telnet Server 23/TCP — Rx
BOOTP Server 67/UDP — Rx (IPRC); Tx (others)
BOOTP Client 68/UDP — Tx (IPRC); Rx (others)
TFTP Server 69/UDP — Rx
HTTP Server 80/TCP — Rx
MGCP Server 2427/UDP - Rx & Tx
RTP (voice) 5004/UDP — Rx & Tx; must be an even number (BOLD)
RTCP 5005/UDP — Rx & Tx; one more than RTP (BOLD)
Call Control 5566/TCP — Rx (IPRC) (BOLD)
General Purpose 5567/UDP — Rx &Tx (BOLD)
[Debug Messages 5568/UDP — Tx]

Ok. We have remote phones working. The public IP addresses needed to be swapped.

Unfortunately, I currently have all ports open through thesse public IPs to the private IPs of the switch because my current firewall device cannot do ranges of ports in the basic NAT. This could be accomplished with "filters", but they are a bit trickey and I have a proposal in to replace the device, so I will just wait.

Thank you for all the help!