Restricting access to extensions

[shak]

Hi,

We have PA Speakers and other devices around the network. Some of them prompt for PIN codes to access certain functions, but most do not.

I need to be able to set it up so that only certain extensions can all those PA Speakers. Example: Receptionist (eg 2000), The Boss (eg 2001), and 3 extensions of IT staff (eg 2002, 2003, 2004).

I'm aware of the forwarding rules, which will need me to do something like:
0-9 - block
00-99 - block
000-999 - block
0000-1999 - block
(extensions above get allowed here)
2005-9999 - block
00000-99999 - block
...
and so on.

The above will theoretically take care of incoming calls over the IVR. I don't know what the behaviour will be if the number is silent.

This is per extension, and is very onerous.

And hope that people don't / can't impersonate their phone numbers from outside.

I would've probably gone direct-IP SIP and configured some speed dials for people who needed them, but our devices don't support that.

Is there a better way?

Thanks

 

[ChrisC_3CX]

That should actually work just fine, but, you can also do this instead:

1. Create an exception for the PAs as so:


2. Disable direct dialing from IVRs to the PAs extensions by going into "Settings >> Parameters" and editing the following parameter:
IVR_DIRECT_DIALING_GRAMMAR

Set its value so that:
(((?!EXTA)(?!EXTB)...)[0-9]{4})

Where EXTA and EXTB are the PA extensions. If for instance you have 3 PA extensions 2222, 3333 and 4444 you would have:
(((?!2222)(?!3333)(?!4444))[0-9]{4})

You will have to restart the IVR service after making this change for it to take affect.

If you face any issues with this parameter I recommend exclusively using exceptions on the PA extensions instead.

 

[shak]

Hi Chris,

Thanks for your response.

I've seen IVR_DIRECT_DIALING_GRAMMAR before and conveniently forgot about it. Thanks for the greedy-regexp tip. We have our PAs on a different first-number basis, so in our case it would be simpler likeso: ([23][0-9]{extension-length-minus-1})

Combining the ranges in the forwarding rules will simplify editing, too.

It would've still been nice to have a whitelist based mechanism, though.

Or perhaps a group that can only be accessed by a grammar rule, or another group.

How do we "feature request" such things?

Thanks,
shak

 

[ChrisC_3CX]

How do we "feature request" such things?

That would be in our Ideas Section, though it does require a certain partner level (Gold and above) to be able to post there. You can always ask another community member or partner who has the appropriate privileges to post on this on your behalf though.