Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

ERX Firewall Config for SIP/VOIP

$
0
0

First time playing w/ an edge router .. not shabby. I am trying to configure inbound SIP/VOIP for a grandstream ucm which is behind the ERX. I've setup port forwarding as well as NAT. We can make outbound calls are fine, inbound are failing.

 

Where can I view logs to help diagnose ?

firewall {
    all-ping enable
    broadcast-ping disable
    group {
        port-group SIP-Group {
            description ""
            port 5060
            port 10000-20000
        }
    }
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    name VOIP-Rules {
        default-action accept
        description ""
        rule 1 {
            action accept
            description "VOIP Inbound"
            destination {
                group {
                    port-group SIP-Group
                }
            }
            log disable
            protocol udp
            source {
                group {
                    port-group SIP-Group
                }
            }
            state {
                established enable
                invalid disable
                new disable
                related enable
            }
        }
    }
    name WAN_IN {
        default-action drop
        description "WAN to internal"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
        rule 21 {
            action accept
            destination {
                group {
                    port-group SIP-Group
                }
            }
            log disable
            protocol udp
            source {
                group {
                    port-group SIP-Group
                }
            }
        }
    }
    name WAN_LOCAL {
        default-action drop
        description "WAN to router"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}

Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>