Work with a Proxy Firewall
99
SIPxNano IP-PBX Getting Started Guide
B • Firewalls and NAT
Work with a Proxy Firewall
For phones to work in an environment with a proxy-based firewall, the firewall must have a SIP-specific proxy
implemented. Refer to the documentation provided by your firewall vendor for instructions on how to config-
ure its SIP features.
Configuring phones for a SIP firewall proxy
For phones to work with a SIP firewall proxy, you are likely to need to set the
SIP_PROXY_SERVER
parameter
Route all outbound SIP messages through proxy to the internal IP address of your SIP firewall proxy.
Depending on the requirements of the SIP firewall proxy that you use, you may also need to configure your
phones by setting one or more of the following:
•
HTTP proxy host name
and
HTTP proxy port number
PHONESET_HTTP_PROXY_HOST and PHONESET_HTTP_PROXY_PORT
•
Host address outside NAT firewall
PHONESET_EXTERNAL_IP_ADDRESS
•
Port for inbound SIP TCP messages
and
Port for inbound SIP UDP messages
SIP_TCP_PORT and SIP_UDP_PORT
•
Starting port for RTP/RTCP packets
PHONESET_RTP_PORT_START
Using HTTP proxy settings
Phones use the HTTP protocol to download software upgrades and application .jar files. If these HTTP trans-
actions have destinations on a remote server and must go through a proxied firewall, you may need to set values
for the
HTTP proxy host name
and
HTTP proxy port number
to allow the phones to originate the HTTP
transactions. Examples for these parameters follow.
PHONESET_HTTP_PROXY_HOST:
HTTP proxy host name:
httpproxy.Patton.com
PHONESET_HTTP_PROXY_PORT:
HTTP proxy port number:
8080