The portforwarding FAQ (hope this gets a sticky:)

[DaKhalli]

Dear forum members,

I have come to the conclusion most errors are due to poor portforwarding.

In this topic i want to collect sites/links to good portforwarding resources.

http://portforward.com/routers.htm
This site has a impressive list of detailed guides on howto portforward on a lot of different routers.

http://www.phenoelit.de/dpl/dpl.html
This site has a list of default login names and password for most routers.
Handy, if you cannot remember the default password (afther a reset e.g.)

If you have any information that you feel is missing, please do not hesitate to contact me here or at: doorstep (at) zonnet) (d.o.t) nl

List of default ports used by the 3cx phonesystem:
5060 (stanard sip port) TCP/UDP
5061 (secondary sip port) TCP/UDP
5480 (portgre) (only on local machine)
5481 (apache) (only on local machine)
5482 (media server) (only on local machine)
3478 (STUN Server) TCP/UDP
7000-7500 (Default port for internall calls) (only on local machine)
9000 - 9003 (ports for external calls through VOIP Gateway) UDP
10000-20000 (RTP ports) (Used if no stun available for audio)


Greetings,
daKhalli

 

[N_G]

Excellent post Dakhalli! The FAQ looks very good! Maybe we can add an example in the post how users should use the port forward FAQ? I.e a configuration example for a particular voip provider and how you referenced the faq to setup the router/firewall?

 

[DaKhalli]

Not sure what you exactly mean with configuration example, i added a list of all ports used by 3cx default. The sites give detailed instruction on portforwarding specific applications.

tho a general faq should be in place here, ill work in that.

for now i hope yall add some usefull information to this topic like the admin did

 

[Anonymous]

Only one minor correction required I guess.....

5061 (secondary sip providor port)

I would suggest to just leave it as secondary port. It is not provider bound. For example in general I configure SPA3102's with 5060 as line 1 (when in use) and 5061 for PSTN

20000-21000 (RTP ports) (Used if no stun available for audio)

The range is actually a bit bigger than that it is 10000 - 20000. For example spa3102 uses 16384 - 16482 out of the box.


I also would add if it is TCP or UDP or both.
For example:
5060 (stanard sip port) TCP/UDP
5061 (secondary sip providor port) actually SIP-TLS TCP/UDP
3478 (STUN Server) TCP/UDP

7000-7500 (Default port for internall calls) (only on local machine)

Special not on this one actually. the 7000 range has some allocated IP's used by other devices and apps. for example if you do server to server update using 7008 or AFS/Kerberos auth. service 7004 etc.

9000 - 9003 (ports for external calls through VOIP Gateway)

same for this one again I do not expect any troubles but for people running CSlistener(9000), ETL Service Manager(9001), DynamicID authentication (9002) there might be some clashes.

 

[DaKhalli]

Thanks for the addition, thos 9k and 7k ports are the default ones for 3cx. Ill add the good comments to the faq thans a lot for your feedback

 

[DaKhalli]

no one with more info then this?

please correct me if any information is incorrect.

 

[DaKhalli]

bump

 

[Kevin Attard Compagno]

The basic info looks right...

...maybe we should go to the next level and create a real FAQ for the website, plus a sticky post that references it...

Could we include an example to configure port forwarding using a specific model of router? Maybe identify one of the most popular ones and do a factory-reset - to - fully-configured doc?

Comments?

Regards

 

[DaKhalli]

sure np, cept i only have a sitecom simple wireless router here..

Name the router you want to have a config for an ill make one or find some1 thats wiling to help me.

 

[studentatious]

Dlink WBR-2310

Can you post the Port forwarding configuration for a DLINK WBR-2310 as an example. I am currently unable to ring SIP URIs outside my internal LAN and am not sure what to set them up as.

 

[Anonymous]

Port forwarding configuration for a DLINK WBR-2310 as an example

Have you done a forum search? I believe there is someone else with this device which had the same problem (or perhaps I am confused with one of my support customers).

Anyway do a search see what comes up.

 

[tjabaut]

Ports 7000-7500

Could someone please shed some light on these ports?

What exactly are they. Are they the RTP port range for internal calls? And if so, then should we not need to change these ports on our gateways.

I have been under the assumption that ports 9000 - xxxx are the RTP ports for external calls correct.

I am trying to make sure that I am not misspeaking about my assumptions.

 

[nb]

You dont need to change anything related to port range 7000-7500 on the gateway because these ports are used for internal calls only - from extension to extension. And in this example say I on extension 100 call you on extension 102 (both internal) the gateway is not involved in this connection. The gateway is used when a call touches the pstn network portion - ie when we may need to call outbound.

Yes these ports are used only for RTP pkt transfer.

Yes you are right. The only difference between port ranges 7000 - 7500 and 9000 - x is that they indicate in the server and eventually to the PBX the status whether a particular call is internal or external. If it is internal you will see RTP pkts transfer with the 7000 range, if not you'll see them passing through 9000 range.

Hope the above gives you more light on the usage of these ports.

 

[MajoR_Mess]

I have come to the conclusion most errors are due to poor portforwarding.

Shouldn't this thread be headed Firewall FAQ rather than Port Forwarding?

 

[touficjohn]

I'd love it someone could make guides for point-to-point sonicwall VPN's lmao...

Those damn things are so annoying!

 

[silentfun]

The RTP Ports 10000 - 20000 are they TCP or UDP Ports?

Andy