We authenticate IP-PBX SIP Trunking traffic by:
IP Authentication (IP address) or
Digest Authentication (service account and PIN)
After you decide which switch platform to use, you will need to establish a SIP trunk with our
proxy server (ippbx.voiplid.com port 5060) and input your IP address into our portal or
register your switch with us.
IP Authentication (IP Address)
The IP Authentication method should be used when you have a static IP-PBX IP Address. IP
Authentication provides enhanced security since your SIP trunk can only be used from the IP
Address you provide.
Outgoing Settings: Incoming Settings:
[out-1] [in-1]
type=peer disallow=all
port=5060 type=peer
nat=auto port=5060
insecure=invite nat=auto
ignoresdpversion=yes insecure=invite
host=ippbx.voiplid.com host=169.132.136.9
dtmfmode=rfc2833 dtmfmode=rfc2833
context=from-trunk context=from-trunk
canreinvite=no canreinvite=no
allow=ulaw allow=ulaw
allow=g729 allow=g729
[in-2]
disallow=all
type=peer
port=5060
nat=auto
insecure=invite
host=66.33.167.74
dtmfmode=rfc2833
context=from-trunk
canreinvite=noallow=ulaw
allow=g729
If you are using a web-based Asterisk PBX (like FreePBX), IP Authentication setup is slightly
different:
In "Outgoing Settings", name the section "out-1"
Then, in "Peer Detail", enter the following:
type=peer
port=5060
nat=auto
insecure=invite
ignoresdpversion=yes
host=ippbx.voiplid.com
dtmfmode=rfc2833
context=from-trunk
canreinvite=no
allow=ulaw
allow=g729
In "Incoming Settings", name the section "in-1" in "User Context"
Then, in "User Detail, enter the following:
disallow=all
type=peer
port=5060
nat=auto
insecure=invite
host=169.132.136.9
dtmfmode=rfc2833
context=from-trunk
canreinvite=no
allow=ulaw
allow=g729
After this has been completed, you will have to create a separate trunk. For the second trunk,
name the outgoing "out-2" and again enter the following information:
type=peer
port=5060
nat=auto
insecure=invite
ignoresdpversion=yes
host=ippbx.voiplid.com
dtmfmode=rfc2833
context=from-trunk
canreinvite=no
allow=ulaw
allow=g729
Then, for the second trunk, name the incoming "in-2" and again enter the following
information:
disallow=all
type=peer
port=5060
nat=auto
insecure=invite
host=66.33.167.74
dtmfmode=rfc2833
context=from-trunk
canreinvite=no
allow=ulaw
allow=g729
No registration string is required for IP Authentication.
Please make sure to configure your router/firewall to allow traffic from:
66.33.167.74:5060
169.132.136.9:5060
169.132.196.11:5060
66.33.146.52:5060
In addition, please allow all RTP traffic from any IP Address ports 10000-30000 UDP.
Digest Authentication (Account & PIN)
On open source applications (such as Asterisk), you can setup your SIP trunk for digest
authentication as follows:
Peer Detail User Detail
username= <account> username=<account>
type=peer user=<>
secret= <pin> type=user
progressinband=never port=5060
port=5060 context=from-pstn
nat=auto canreinvite=no
insecure=very allow=g729&g711&g723
ignoresdpversion=yes Register String
host=ippbx.voiplid.com acct:pin@ippbx.voiplid.com/siptrunking
dtmfmode=rfc2833
context=from-trunk
canreinvite=no
allow=g729&g711&g723
There are several GUI interfaces for Asterisk that simplify the installation process. These
interfaces allow administrators to view, edit and change most configurations via a Web
interface. Unless you are an advanced Asterisk user, we highly recommend downloading one
of the following GUI interfaces:
Elastix
http://www.elastix.org/
PBX in a Flash
http://pbxinaflash.net/
AsteriskNOW
http://www.asterisk.org/asterisknow/
On other types of switch platforms, we recommend that you configure your switch as per your
vendor guidelines (see Appendix). Please note that we do not provide direct technical support
for end user SIP Trunking switch platforms. If your switch is not working as expected, you may
need to contact the device manufacturer for technical support.