Administration

SIP Trunk with IP-based Authentication
IMPORTANT

On the network that routes UCX voice (SIP) traffic, we require SIP ALG be disabled. Most commercial routers have SIP ALG enabled by default. Please check the manufacturer's handbook for your device on how to disable SIP ALG. (See Unexpected call failures and registration problems for details.)

With IP based authentication, you will need to obtain the IP address of the host from the trunk provider.

Follow the steps below to setup a PEER based IP authenticated trunk:

  1. Open UCX Administration
  2. From the PBX tab, select PBX Configuration
  3. From the left side column, select Trunks
  4. Select Add SIP Trunk

General Settings

Enter the Trunk Name, this is the name used to referenced the trunk, for example in the Inbound and Outbound Route pages.
(See Adding SIP Trunks for information on the other fields in this section.)

Outgoing Settings

Enter the Trunk Name (DO NOT use spaces). This name will appear in log files.
For PEER Details, these are the recommended settings:

ParameterValueDescription
hostxxx.xxx.xxx.xxxIP address of the SIP trunk provider’s server
typepeerThe supported values are: peer, user, friend. Friend is both a peer and user.
contextfrom-trunk“from-trunk” means that incoming calls from this trunk will be treated as if they are coming from an outside line, and will be routed using the rules that you setup in the Inbound Routes page.
“from-internal” means that incoming calls from this trunk will be treated as if they were made by an internal phone, and will be routed directly to an extension number, a feature code, or through the outbound routes page.
Generally, you use “from-trunk” when routing calls from an outside source and “from-internal” for trunks that tie two trusted systems together.
qualifyyes“yes” means to periodically send a request that the other system identify itself.  If there is no answer within 2 seconds, your system will assume that the other system is down and stop sending calls to the system until the system responds. Instead of “yes,” you can also put a number, in miliseconds.  For example, qualify=3000 means that your system will wait 3 seconds for a response, instead of 2 seconds.
insecureport,invite“port” means to accept incoming calls even if they come from a port other than the one where calls are expected to come from.
“invite” means to accept incoming calls even if they are not accompanied by the proper username and password.
Most ITSP’s require this line.  If only one is used, the comma separating them is omitted.
deny0.0.0.0/0.0.0.0[Optional] For added security, include “deny” and “permit” to limit access based on IP address.
permitxxx.xxx.xxx.0/255.255.255.0[Optional] Allow access only to the specified IP subnet.


Contact your service provider for the required fields and values to be configured.

Incoming Settings

Leave the USER Context and USER Details blank
Leave the Register String blank.

NOTE

The connection parameters in PEER Details are applied to both incoming and outgoing. Only in cases when you have two different PEERS for incoming and outgoing, then you would fill in the USER Context and USER Details for the second PEER. In most cases, you just leave the USER Context and USER Details blank.

NOTE

If you have a dedicated internet connection for your SIP trunk, proceed to the Static Routes page to configure a static route for your SIP trunk.

Contents