Port for VOIP

[Sangar3]

I have an SBC running with Yealink phones connected to the 3CX in the cloud. The phones are on a separate VLAN from anything else. I wanted to prevent users from plugging their laptops on this vlan and getting internet. Can we allow whatever specific ports required, while also disabling 80 443? What are those ports?

Thank you!

 

[eddv123]

Sound like you want Cisco switch port security:
https://www.techrepublic.com/blog/it-security/lock-down-cisco-switch-port-security-88196/

 

[Saqqara]

This would be a setup on the network switch, you need to restrict the voice vlan to certain Mac addresses.

As this is not a 3cx issue, you maybe better off asking the question on the switch manufacture forums

Another way you could deny full internet access to non 3cx devices on the router protecting your remote network by again using Mac addresses

Note,: you cannot disable port 443 on the3cx vlan network as this is used by the provisioning url and address book