We just signed up to use SIP phones instead of using the old PBX box. We received the phones the other day but upon plugging them in and adjusting settings in Kerio Conrol (Version 9.1.0) we cannot connect them to our Service Providers system to get them registered and working. Here are the settings that they said need to be adjusted:
"Firewalls are primarily designed to keep unauthorized trafﬁc from accessing your private network. In some cases the default ﬁrewall rules might cause Nextiva's trafﬁc to be blocked. The simplest way to avoid issues is to open up inbound and outbound trafﬁc to/from Nextiva's IP addresses.
• IP Addresses: 22.214.171.124/21 and 126.96.36.199/22. This range covers the IP addresses from 188.8.131.52 - 184.108.40.206 and 220.127.116.11 18.104.22.168.
• Ports: 5060-5090
• Transport Method: TCP & UDP
• Permission: Allow All Trafﬁc
When setting up ﬁrewall rules, please ensure you are creating a ﬁrewall rule to allow access through the entire Nextiva IP address range. All Nextiva servers are located in the following IP range:
CIDR: 22.214.171.124/21 & 126.96.36.199/22
Range: 188.8.131.52 - 184.108.40.206 and 220.127.116.11 18.104.22.168 Cisco Firewall Rules
To whitelist Nextiva's IP range in a Cisco command line device, the following rules must be set:
• access-list permit ip 22.214.171.124 0.0.7.255
• access-list permit ip 126.96.36.199 0.0.3.255"
What should my traffic rules look like to accomplish the above?
Also, is there anything else that would need to be adjusted?
- ksnyder (KERIO)
1. Use "IP Address Group" to define the trusted Nextiva IP Address range(s)
2. Use "Services" to create a custom service for the required Nextiva TCP/UDP ports
3. Use 1 & 2 above to create a traffic rule that allows those IP's to reach your firewall on those ports
Director, Sales Engineering | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Kerio discussion forums are intended for open communication between forum
members and may contain information and material posted by members which may
be useful in learning about Kerio products. The discussion forums are not
intended to provide technical support for any specific product. Any
information implied or expressed in the discussion forums is that of the
posting member. Kerio is in no way responsible for the information posted in
the forums, or its accuracy. Kerio employees may participate in the
discussions, but their postings do not represent an offical position of the
company on any issues raised or discussed. Kerio reserves the right to
monitor and maintain the forums to promote free and accurate exchange of