Preparation and Port Forwarding

You want to ensure these are forwarded 1 to 1 (ie. 5060 forwards to port 5060). Once these are done, you will want to run the firewall tester to confirm that the PBX can access the ports it requires successfully.

Remote Access

If you want to access your PBX remotely (from the Internet), you must forward these two ports. They are optional.

• 5000 TCP
• 5001 TCP

RTP and SIP

• 5060 TCP
• 5060 UDP
• 5090 TCP
• 9000-9255 TCP
• 9000-9255 UDP

Firewall Test

 Ensure you are on the Dashboard, located in the top left-hand corner of the screen.

1. 
   You will click on Firewall in the middle of the screen under PBX Status. The first run will show a red circle with an exclamation mark in the middle.
   
2. Select “Run,” and the test will start. All options must be green; otherwise, the SIP trunk will not register or work correctly.
   
3. The firewall icon will turn to a green checkmark once all the tests have successfully run and passed.

Add the SIP Trunk

1. From the menu on the left-hand side menu, select SIP Trunks
   
2. Click the "Add SIP Trunk" button
3. A window will pop up asking for the provider, country, and the Main Trunk No (DID). Once completed, click OK.
   -Country – Select “Generic"
   -Provider – Select "Generic SIP Trunk"
   -Main Trunk No – enter in the 11-digit DID provided for the created SIP Trunk.
4. Under Trunk Details, enter a name for the new SIP Trunk and enter the information requested:
   - Registrar/Server/Gateway Hostname or IP – transport-tcp.domain.tld (domain.tld = SIP Domain) domain.tld = sip domain
   - Outbound Proxy – use sip.siplogin.ca (set port to 0 for DNS-SRV failover to work correctly)
   
   If we don't use transport-tcp  it will try to register over TLS and will not receive a response. The PBX uses the following transport strictly in this order without the added override TLS, then TCP, then UDP. This will not work with transport-udp either. 
   
   The number of SIM Calls should be set to the maximum number of channels your trunk allows.
5. Under Authentication, fill in the following:
   Type of Authentication – select “Register/Account-based”
   Authentication ID – enter your SIP username
   Authentication Password – enter your SIP Password
   3-Way Authentication – Leave unchecked.
6. Under Route Calls to, select where you want your inbound calls to route to, otherwise leave these at their default values until an extension has been setup.
   
    
7. Under "Options" - Advanced:
   Ensure "Force Invites to be sent to IP of Registrar" is enabled. 
   Set "Re-Register Timeout" to 60. 
   
8. Under "Inbound Parameters," leave all options at the default value. 
   
9. Next, select the "Outbound Parameters" must tab and set the following options:
   Request Line URI: User Part – Leave as Default Value"
   
   Request Line URI: Host Part – set to Custom Field and enter the SIP Domain name (domain.tld)
   
   To: User Part - set to "CalledNum" number that has been dialled
   
   From: Display Name - set to "CallerName" caller's name
   
   From: User Part - set to "CallerNum" caller's number.
   
   Example Outbound parameter setup for optimal settings
   
10. Click OK at the top of the page to save all your trunk settings.
11. from the main SIP Trunk page, where your new SIP Trunk is now listed. Click "refresh registration." If the registration is successful, it will show as a green dot.
    
    If the dot is red or yellow, you will have to review the information you entered to ensure it is correct and try again.
12. Navigate to Settings -> Network -> Public IP 
    uncheck the option "Automatically Bind to IPv6 Adapters if present.
    
    Restart the SIP Service to apply the settings.