Yeastar Technology MyPBX-SOHO, Administrator'S Manual

Page 1: ...MyPBX SOHO Administrator Guide Version 70 19 0 23 Yeastar Information Technology Co Ltd...

Page 2: ...em 15 5 1 Network Preferences 16 5 1 1 LAN Settings 16 5 1 2 DHCP Server 17 5 1 3 VLAN Settings 17 5 1 4 VPN Settings 19 5 1 5 DDNS Settings 20 5 1 6 Static Route 20 5 2 Security Settings 21 5 2 1 Sec...

Page 3: ...mpts 96 6 5 2 Music on Hold Prompts 97 6 5 3 System Prompts Settings 98 6 6 Basic Settings 98 6 6 1 General Preferences 98 6 6 2 Business Hours 101 6 6 3 Feature Codes 102 6 6 4 Voicemail Settings 106...

Page 4: ...se Auto Provision 137 APPENDIX E How Do I Configure Distinctive Ring Tones 141 APPENDIX F How to Use DID 143 APPENDIX G How to Use BLF Key to Choose the PSTN Line 146 APPENDIX H MyPBX Security Configu...

Page 5: ...built in packet capture tools BLF Support Interactive Voice Response IVR Blind Transfer Intercom Zone Intercom Call Back L2TP Call Detail Records CDR LDAP Call Forward Mobility Extension Call Parking...

Page 6: ...reen LED indicates the Internet interface is in use Red LED stands for FXO port Orange LED indicates presence of a BRI port Green LED stands for FXS port Red LED blinks FXO port isn t connected to PST...

Page 7: ...MyPBX SOHO Administrator Guide 7 204...

Page 8: ...r end of the Ethernet line with a hub switch router LAN or WAN Once connected check the status of the LED indicator A yellow LED indicates the port is in the connection process and a green LED indicat...

Page 9: ...er outlet 2 Check the Power LED on the front panel A solid green LED indicates that power is being supplied correctly 3 Administrator Login From your web browser input the IP address of the MyPBX serv...

Page 10: ...Figure 3 1 This is the welcome page of MyPBX SOHO after successful login Figure 3 2 You can also login via HTTPS protocol Like https 192 168 5 147 you will see a prompt that is a certificate problem...

Page 11: ...ect Clean the cache and cookies of the browser before login There is a compatibility issue with IE11 Configure IE11 browser Compatibility View Settings add MyPBX IP address and check Display Intranet...

Page 12: ...2 204 Figure 3 5 4 Status Click to start to check the status of MyPBX SOHO We can check the status of extensions trunks and network and system information 4 1 Line Status In this page we can check the...

Page 13: ...tus Figure 4 1 MyPBX Status Description Extensions 1 Extension is unavailable 2 Extension is idle 3 Extension is ringing 4 Extension is busy 5 Extension is on hold 4 1 2 Trunk Status Figure 4 2 Trunks...

Page 14: ...tus Idle The port is idle Busy The port is in use Disconnected The port hasn t connected to the PSTN line More detail message please refer to the LED indication of front panel BRI Trunk Status Ok The...

Page 15: ...e the IP address of LAN port will appear If OpenVPN and VLAN are configured well they will be displayed here too Figure 4 4 5 System Click to access In this page we can configure the network settings...

Page 16: ...ss MyPBX Enable SSH This is the advanced way to access the device you can use the software putty to access the device In the SSH access you can do more advanced setting and debug it s disabled by defa...

Page 17: ...e configured for a given network You can set a local network NTP server for MyPBX here too Note MyPBX SOHO can be working as a DHCP server but cannot be regarded as a router Figure 5 2 5 1 3 VLAN Sett...

Page 18: ...er LAN VLAN Subnet Mask Set the Subnet Mask for MyPBX VLAN over LAN Default Gateway Set the Default Gateway for MyPBX VLAN over LAN NO 2 Click the NO 2 you can edit the first VLAN over LAN VLAN Number...

Page 19: ...orized persons from reading the information transmitted The VPN can be used to send any kind of network traffic securely MyPBX supports OpenVPN IPSec and L2TP Figure 5 4 Enable OpenVPN Import VPN Prof...

Page 20: ...r name the DDNS server provides you Password User account s password Host Name Note DDNS allows you to access your network using domain names instead of IP address The service manages changing IP addr...

Page 21: ...g metrics are assigned to routes by routing protocols to provide measurable statistic which can be used to judge how useful how low cost a route is Interface Define which Internet port to go through 2...

Page 22: ...tion and alert settings By clicking the relevant button you can enter the configuration page directly Service Figure 5 8 Security Center Service In Service tab you can check AMI SSH TFTP status For AM...

Page 23: ...om remote hosts will be dropped Drop All When you enable Drop All feature system will drop all packets or connection from other hosts if there are no other rules defined To avoid locking the devices a...

Page 24: ...P address for this rule The format of IP address is IP mask E g 192 168 5 100 255 255 255 255 for IP 192 168 5 100 E g 216 207 245 47 255 255 255 255 for IP 216 207 245 47 E g 192 168 5 0 255 255 255...

Page 25: ...connections can be handled per unit time For example if you configure it as below Port 8022 Protocol TCP Rate 10 min Then it means maximum 10 TCP connections can be handled in 1 minute The 11th connec...

Page 26: ...IP packets For example IP packets 90 time interval 60 means 90 IP packets are allowed in 60 seconds 2 IP blacklist The blocked IP address will display here you can delete it as you wish 5 2 4 AMI Set...

Page 27: ...to log in MyPBX AMI IP Restriction you can set which IP can log in MyPBX AMI interface 5 2 5 Database Grant SOHO are using MySQL database from 14 18 0 22 The 3rd party software can access MySQL via in...

Page 28: ...ble phone notification Number The numbers could be set for alert notification users can setup multiple extension and outbound phone numbers Please separate them by Example 500 9911 if the extension ha...

Page 29: ...mail Email Content Text content supports predefined variables Variable names and corresponding instructions are as follows HOSTNAME Host name LOCALIP Local IP address SOURCEIP Attack source IP address...

Page 30: ...will limit the IP login within 10 minutes and notify the user Figure 5 19 Web Login Alert Setting 5 3 LDAP Server 5 3 1 LDAP Server LDAP is used as a phone book on MyPBX so that you can search a key...

Page 31: ...e LDAP on your IP phone Root Node A root node for this LDAP e g dc pbx dc com PBX Node A pbx node for this LDAP e g ou pbx dc pbx dc com User Name A user for this LDAP e g cn admin dc pbx dc com Passw...

Page 32: ...4 1 External Storage The External Storage feature is used to extend storage space Once configured the files voicemail call recording files created before the configured days will be moved to the Net D...

Page 33: ...xternal storage can be properly configured an SMB share folder accessible from MyPBX must be set up on a Windows based machine Once that has been set up please follow the steps below Figure 5 23 Step...

Page 34: ...me of the shared folder where backups will be stored Net Disk Share Username The user name used to log into the network share Leave this blank if it is not required Net Disk Share Password The passwor...

Page 35: ...e password strength It is recommended that you use numbers upper case letters and lower case letters to increase the security When you log in MyPBX using admin account you can enable user and cdr acco...

Page 36: ...using admin account To change the password select cdr in User enter the old password and new password and click Save The system will then prompt you to re login using your new password After you ente...

Page 37: ...y here 5 5 3 Firmware Update Upgrading of the firmware is possible through the Administrator web interface using a TFTP Server or an HTTP URL Enter your TFTP Server IP address and firmware file name t...

Page 38: ...with file format bak Notes 1 Only configurations custom prompts will be backed up the voicemail and recording files are not included 2 When you have updated the firmware version it s not recommended...

Page 39: ...page Figure 5 34 Reboot System Warning Rebooting the system will terminate all active calls Reset to Factory Defaults Warning A factory reset will erase all configuration data on the system Please do...

Page 40: ...ll control audio settings and the others After configuration we can make or receive calls as expected 6 1 Extensions In this page we can configure the extensions details and provision the supported mo...

Page 41: ...ons in MyPBX SOHO V5 if S2 module is installed to modify the extension number please delete it first and then recreate it again 1 General Figure 6 3 Extension The numbered extension e g 1234 that will...

Page 42: ...Detection Sets the amount of time in milliseconds that must pass since the last hook flash event received by MyPBX before it will recognize a second event If a second event occurs in less time than de...

Page 43: ...DND Don t Disturb User Web Interface Check this option to allow the user to log in to the MyPBX User Web interface which can be used to access voicemail and extension recordings Users may log in the M...

Page 44: ...ed Enable Mobility Extension Enable this feature Mobility Extension Number When you dial the server with this number the mobile phone gets the permission of the extension For example dialing the other...

Page 45: ...r 501 and choose the spy mode for extension 500 Then pick up 500 and dial feature codes 501 to start monitoring when 501 is in a call If 500 choose normal spy it should dial 90501 to start monitoring...

Page 46: ...e extension sends and receives calls using the VoIP protocol IAX Extension The numbered extension e g 1234 that will be associated with this particular User Phone Password The password for this extens...

Page 47: ...ess used to receive the voicemail or Fax Note Please ensure that the section SMTP Settings For Voicemail in the Voicemail Settings has been properly configured before using this feature 4 Group Pickup...

Page 48: ...P RTP Encryption Transport This will be the transport method used by the extension The options are UDP default or TCP or TLS DTMF Mode RFC2833 Info Inband Auto Remote Register Allow to register remote...

Page 49: ...waiting function DND Don Not Disturb When DND is enabled for an extension the extension will not be available User Web Interface Check this option to allow the user to login to the MyPBX User Web int...

Page 50: ...100 255 255 255 255 means only the device whose IP address is 192 168 5 100 is allowed to register this extension number E g 192 168 5 0 255 255 255 0 means only the device whose IP address is 192 16...

Page 51: ...01 and choose the spy mode for extension 500 Then pick up 500 and dial feature codes 501 to start monitoring when 501 is in a call If 500 choose normal spy it should dial 90501 to start monitoring If...

Page 52: ...eral preferences codecs remote phone book and firmware upgrade Note if firmware download server is enabled IP phone will update the firmware automatically according to the version and server you have...

Page 53: ...n you use phone provisioning the IP phone will download the phone book Figure 6 11 1 Add Contact Type There are three types None VIP and Deny list Blacklist Group There are 5 groups None Friends Famil...

Page 54: ...irthday of this contact Only works with snom phone First Name Input the first name of this contact Only works with snom phone Family Name Input the family of this contact Only works with snom phone Of...

Page 55: ...igure your IP phones The format of phonebook should be xml Note All the existing phonebooks of the IP phone will be replaced automatically if the phonebooks are configured in this way 6 1 2 4 Configur...

Page 56: ...the pop up window Figure 6 13 1 General Enabled Choose yes or no to enable or disable this extension New Config If your IP phone s firmware version is above x 70 x x you should select Yes Or else it s...

Page 57: ...sable this feature Auto redial Enable or disable the auto redial for the IP Phone Auto answer Enable or disable auto answer for the IP phone Phone book Enable or disable the feature of phone book for...

Page 58: ...istrator Guide 58 204 Figure 6 14 3 Memory key settings In this page we can configure the DSS keys of the IP phone one by one Figure 6 15 4 Line keys settings We can configure the line key settings fo...

Page 59: ...C address of an IP phone and input the corresponding information in the pop up window like figure 6 13 Figure 6 17 6 1 2 5 Upload a file Click Upload a file and choose the configuration file of IP pho...

Page 60: ...e Interface BRI 2B D 2B1D is an Integrated Services Digital Network ISDN configuration intended primarily for use in subscriber lines similar to those that have long been used for plain old telephone...

Page 61: ...g BriTrunk1 Signaling Signaling method BRI CPE ISDN BRI in TE mode and Point to Point BRI CPE PTMP ISDN BRI in TE mode and Point to multi Point BRI NET ISDN BRI in NET mode and Point to Point BRI NET...

Page 62: ...t experience also shows that this parameter may also cause issues on local switches in the UK and China PRI Indication Tells how Device should indicate Busy and Congestion to the switch user Accepted...

Page 63: ...the CID So you can know this is a national call before you answer it Local Prefix When there are Local calls coming in via this BRI trunk the Local Prefix you have set here will be added before the C...

Page 64: ...OD Add DOD Add DOD for one associated extension Add Bulk DOD Figure 6 22 Add bulk DOD for bulk extensions in ascending sequence with the Begin DOD you fill in For example if the Associated Extensions...

Page 65: ...Name A unique label used to identify this trunk when listed in outbound rules incoming rules etc E g pstn5 Volume Setting Used to modify the volume level of this trunk Normally this setting does not...

Page 66: ...uce the chance of a false positive disconnection Frequency Detection Used for Frequency Detection Enable detecting the busy signal frequency or not Busy Frequency If the Frequency Detection is enabled...

Page 67: ...X in this page we can also configure the service provider trunk which doesn t need the use name and password for authorization when you have bought a trunk from provide with IP address only please cho...

Page 68: ...rotocol SIP Provider Name A unique label to help you identify this trunk when listed in outbound rules incoming rules etc E g yeastar Hostname IP Service provider s hostname or IP address 5060 is the...

Page 69: ...Inbound calls are not counted against the maximum Set as 0 to specify no maximum Caller ID Specify the caller ID to use when making outbound calls over this trunk The caller ID set in the extension p...

Page 70: ...ed when dialing out Before configuring this please make sure the provider supports this feature Associated Extension The extension making call out via SIP Trunk will display the associated DOD Add DOD...

Page 71: ...es calls by using the VoIP protocol IAX Provider Name A unique label to help you identify this trunk when listed in outbound rules incoming rules etc E g yeastar2 Hostname IP Service provider s hostna...

Page 72: ...in the VoIP trunk page Please note that not all the service providers support this feature Contact your service provider for more information DOD DOD Direct Outward Dialing means the caller ID displa...

Page 73: ...n add Service Provider as required And also you can delete multiple trunks at once by ticking the checkbox as required Figure 6 31 Below is service provider trunk peer to peer mode which authorize usi...

Page 74: ...trunk Inbound calls are not counted against the maximum Leave blank to specify no maximum Codecs Define the codec for this SIP trunk and its priority Note codec can only display when editing it after...

Page 75: ...lk DOD for bulk extensions in ascending sequence with the Begin DOD you fill in For example if the Associated Extensions are 100 101 102 103 104 105 with Begin DOD as 5500100 the corresponding DOD wil...

Page 76: ...nd route is 32 2 If the dial patterns are the same in several routes MyPBX will choose the available routes from top to the last one 3 When you have created a new extension please edit the outbound ro...

Page 77: ...ong Distance Password The route password can be used to protect this route from being accessed without a password You can choose one of the passwords in the PIN list that you can click the Pin Setting...

Page 78: ...soon as it can be determined that no other matches are possible Example 1 NXXXXXX will match any 7 digit phone number Example 2 1NXXNXXXXX will match a phone number starting with a 1 followed by a 3 d...

Page 79: ...37 2 Add new speed dial Source Number The speed dial number Destination Number The number you want to call E g the source number is 123 The destination number is 5503305 The prefix number is 99 You ca...

Page 80: ...Auto Attendant MyPBX will play an IVR recording and route the caller to the requested destination for example Welcome to XX company for sales press 1 for technical support press 2 for operator press 0...

Page 81: ...on number to reach the IVR from internal extensions Name A name for the IVR Prompt The prompt recording that will be played when this IVR is reached Repeat Count The number of times that the selected...

Page 82: ...o a ringgroup Connect to IVR Connect the call to an IVR Connect to Conference Room Connect the call to a conference room Connect to DISA Connect the call to a DISA Connect to Queue Connect the call to...

Page 83: ...of availability for incoming calls Multiple ring methods and voicemail are supported Note follow me feature in extension page will not take effect when it s ringing as an agent Figure 6 40 There is a...

Page 84: ...Beforehand the option of Rings Simultaneously should be ticked in the extension settings Seconds to ring each member 1 If the strategy is Ring All Simultaneously it means the number of seconds to rin...

Page 85: ...ll queues allow calls to be sequenced to one or more agents Notes 1 Dial Queue number to log in or Queue number to log out the queue For example if the queue number is 680 then agent can dial 680 to l...

Page 86: ...MyPBX SOHO Administrator Guide 86 204 Figure 6 43 Queue Name A name for the Queue...

Page 87: ...gent which was least recently called FewestCalls Ring the Agent with the fewest completed calls Random Ring a Random Agent RRmemory Round Robin with Memory Remembers where it left off in the last ring...

Page 88: ...gents are logged in No Callers will remain in a queue with no agents Join Empty This option controls whether callers can join a call queue that has no agents There are two options Yes Callers can join...

Page 89: ...Conference agents can dial to access the settings options and the admin can kick the last user out and can lock the conference room Extension This is the number dialed to reach this Conference Room A...

Page 90: ...utside office hours Figure 6 46 Inbound Route List There is a default inbound route for all the trunks and set IVR as the destination you can edit it or create a new one for your demands or you can de...

Page 91: ...inbound route E g pstnin DID Number Define the expected DID Number if this trunk passes DID on incoming calls Leave this field blank to match calls with any or no DID info You can also use pattern mat...

Page 92: ...er ID Number Define the Caller ID Number to be matched on incoming calls Leave this field blank to match any or no DID info You can also use a pattern match e g 2 345 X to match a range of numbers The...

Page 93: ...Select one defined business days office hours Office Hours Destination Configure where to route the incoming calls during office hours End Calls Route the incoming calls to end calls the system will...

Page 94: ...which defined Holiday to use When a time is defined in both Business Days and Holidays it will be treated as Holidays Destination Configure where to route the incoming calls during holidays 5 Fax Dete...

Page 95: ...email Settings should be configured successfully in advance If you want to receive faxes with E mail address configured in VoIP extension voicemail you should first make sure the tested email to your...

Page 96: ...ownload it and save it as a backup Figure 6 48 1 Record new Prompt Figure 6 49 The administrator can record custom prompts by doing the following 1 Click Record New Custom Prompt 2 Input the desired f...

Page 97: ...kHz Mono 1 Kb s Alaw Ulaw 8 kHz Mono 1 Kb s PCM 8 kHz Mono 16 Kb s 6 5 2 Music on Hold Prompts In this page we can upload the music on hold prompts Figure 6 51 The administrator can upload on hold mus...

Page 98: ...h Turkish Thai and Korean currently Notes 1 Auto detection is highly recommended But if you prefer to download via HTTP or TFTP server please contact the local dealer for the prompts 2 When update suc...

Page 99: ...imum amount of time permitted for a call A setting of 0 disables the timeout The default value is 6000s Maximum concurrent calls Maximum concurrent calls limits The default value 0 means no limit Musi...

Page 100: ...isplayed on the screen of the callee The default display is the Caller ID of the initiator For example if extension 500 makes a call to extension 501 After 501 picks up the call 501 makes an attended...

Page 101: ...is 443 Note please reboot the system to take effect 3 Extension Preferences User Extensions The default value is 500 to 616 Ring Group Extensions The default value is 620 to 629 Paging Group Extensio...

Page 102: ...ode on an extension will force the office time to take effect for the device whatever the general setting is Disable Office closed timing By dialing 081 081 is the default code on an extension will di...

Page 103: ...leave a voicemail to other extensions by dialing on their phone or the incoming call could be forwarded to an extension s voicemail directly is the default setting For example extension 500 want to le...

Page 104: ...sper Spy In this mode you can listen whisper to the extension being spied for example dialing 91501 to listen to extension 501 you can also talk with 501 too Barge Spy In this mode you can barge in bo...

Page 105: ...he default setting Enable Forward No Answer Users may enable no answer forward by calling 73 on their phone 73 is the default setting Disable Forward No Answer Users may disable no answer forward by c...

Page 106: ...er of messages that can be stored in a single voicemail box Max Message Time Set the maximum length of a single voicemail message Min Message Time Set the minimum length of a single voicemail message...

Page 107: ...eting play the extension Unavailable greeting c Playback Options Announce Message Caller ID If this option is enabled the Caller ID of the party that left the message will be played back before the vo...

Page 108: ...il yourcompany com Port SMTP Port the default value is 25 Use SSL TLS to send secure message to server If the server of sending email needs to authenticate the sender you need to select the check box...

Page 109: ...MyPBX SOHO Administrator Guide 109 204 6 7 Advanced Settings 6 7 1 SIP Settings 1 General Figure 6 59 UDP Port Port used for SIP registrations The default is 5060...

Page 110: ...MyPBX as TLS client specify the protocol for outbound TLS connections You can select it as tlsv1 sslv2 or sslv3 RTP Port Start Beginning of RTP port range RTP Port End End of RTP port range DTMF Mode...

Page 111: ...SPS trunks Video Support Support for SIP video or no The default is yes Max Bit Rate Configure the max bit rate for video stream The default 384kb s DNS SRV Look Up Please enable this option when you...

Page 112: ...how often the system will perform a DNS query on this host This value is specified in seconds Local Network Identification Used to identify the local network using a network number subnet mask pair w...

Page 113: ...lity and consumes 13 3kbit s in each direction receiving and transmitting of a VoIP call GSM is supported by many VoIP phones SPEEX Speex is an Open Source Free Software patent free audio compression...

Page 114: ...on will not be delayed or dropped due interference from other lower priority traffic When the network capacity is insufficient QoS could provide priority to users by setting the value 5 T 38 Figure 6...

Page 115: ...onymous registration extension or not Default no This option is used to avoid some anonymous calls by hackers For more details about the system security configuration please refer to APPENDIX B MyPBX...

Page 116: ...tion you can control which codec to be used Min Registration Time Minimum duration in seconds of an IAX2 registration The default is 60 seconds Max Registration Time Maximum duration in seconds of an...

Page 117: ...sive proprietary speech codecs Moreover Speex is well adapted to Internet applications and provides useful features that are not present in most other codecs G 726 A PSTN codec used worldwide that pro...

Page 118: ...ill call A with this number When A picks up the call A can dial the number he wants to call MyPBX will call the number with its outbound route Notes 1 If you d like to use callback feature please make...

Page 119: ...e the trunk with callback rules Strip digits from front Define how many digits will be stripped from the call in number before the callback is placed For example when you call from number 123456789 in...

Page 120: ...re 6 72 Note If DID is not configured here all the calls via this trunk will show the DNIS instead of the original caller ID 6 7 6 DISA DISA Direct Inward System Access allows someone calling in from...

Page 121: ...efore hanging up the call if the user has dialed an incomplete or invalid number The default is 10 seconds Digit Timeout The maximum amount of time permitted between each digit when the user is dialin...

Page 122: ...e caller when an invalid PIN is entered Figure 6 75 2 PIN User MyPBX can store a number of PIN Users PIN Users may be used to keep track of calls in relation to particular activities or clients They c...

Page 123: ...external call Name A character based name for this PIN list e g YeastarPIN PIN The password for this PIN list PIN Settings Click to add delete or edit PIN list Member Outbound Route PIN User can use t...

Page 124: ...at this section is for configuring paging groups If you would like to configure Intercom settings please open the Other Settings Feature Codes screen This feature is supported by the following SIP pho...

Page 125: ...PBX can support TLS extension Before you register TLS extension on IP phone you should upload certificates first Figure 6 79 Trusted Certificate This certificate is a CA certificate When selecting TLS...

Page 126: ...mber call type call duration etc An administrator can search and filter call data by call date caller callee trunk duration billing duration status communication type and Pin User Figure 7 1 7 2 Syste...

Page 127: ...eature is used by technician to capture packets Packet capture tool Wireshark is integrated in MyPBX Users also could specify the destination IP address and port to get the packets IP Specify the dest...

Page 128: ...O ports of MyPBX connected to a local PSTN BRI Trunk BRI ports of MyPBX connected to ISDN provider What are FXO and FXS FXS Foreign exchange Station is an interface which drives an analog telephone or...

Page 129: ...vider Before we do add this please make sure you have a VoIP Trunk account Trunks VoIP Trunk SIP Trunk Enter your account information on this page and click Save Figure 9 2 2 Add Outbound Routes As we...

Page 130: ...OHO Administrator Guide 130 204 Figure 9 3 Now that we have added two outbound dialing rules any call starting with 9 will be routed to the PSTN and any number starting with 0 will be routed to the SI...

Page 131: ...to the IVR In the IVR itself let s configure digit 0 to route the call to extension 300 and digit 1 to route the call to ringgroup 1 Add IVR To add a new IVR go to IVR Create New IVR Figure 9 4 2 Add...

Page 132: ...MyPBX SOHO Administrator Guide 132 204 Figure 9 5...

Page 133: ...rd 501 SIP Server 192 168 5 150 Use the same method register another T28 to other extension Q2 How do I reset MyPBX back to the factory default settings A2 To perform a reset please follow the steps b...

Page 134: ...re Properties according to Figure B 1 Figure B 1 Set up share Properties Step 2 Enter the new folder and create a new text file then rename this file to status txt This step is very important DO NOT f...

Page 135: ...sername The user name used to log into the network share Leave this blank if it is not required Net Disk Share Password The password used to log into the network share Leave this blank if it is not re...

Page 136: ...00 default RTP port range as UDP ports Next log in MyPBX Web GUI go to PBX Advanced Settings SIP Settings NAT External IP Address your router s public IP address External Host your router s domain Ext...

Page 137: ...he network settings should be configured according to Figure C 3 Figure C 3 Now MyPBX has been configured as a public IP so there is no need to configure NAT again just leave all settings in NAT blank...

Page 138: ...MyPBX SOHO Administrator Guide 138 204 Figure D 1 Step2 Enable DHCP Server on MyPBX Login MyPBX web interface System Network Preference DHCP Server Enable DHCP Server Figure D 2...

Page 139: ...interface PBX Extensions Phone Provisioning Add Phone Figure D 3 2 Fill in the phone detail message on the pop up windows Input IP Phone s MAC address configure Name Call waiting Line Extension Label...

Page 140: ...e network cable to IP Phone Remark The factory default setting of DHCP for IP Phone is enabled so you can skip this step to step 5 If the DHCP is disabled please follow the steps below to enable it e...

Page 141: ...ctive Ring Tone section For each custom ring tone enter the Internal Ringer Text can be digits or text to trigger the ring tone For example you may enter Family E g Yealink s IP phone Figure E 1 Step2...

Page 142: ...MyPBX SOHO Administrator Guide 142 204 Figure E 2 Step3 Finish...

Page 143: ...ers via the trunk MyPBX support DID you can configure DID in inbound route Related settings DID Number Extension Destination Figure F 1 DID Number Define the expected DID Number if this trunk passes D...

Page 144: ...put number and in this field and the format can be xxx or xxx xxx The count of the number must be only one or equal the count of the DID number Destination If you don t set the extension you can set t...

Page 145: ...tep2 You set the Extension 6001 6099 in this example The configuration of this example means when the incoming call with DID number 6001 to 6099 will go to the destination 6001 to 6099 number 6001 to...

Page 146: ...MyPBX SOHO Administrator Guide 146 204 Figure F 3 APPENDIX G How to Use BLF Key to Choose the...

Page 147: ...e Follow the steps to do the configuration with your Yealink phone 1 We want to choose pstn1 or pstn2 to call out Figure G 1 2 Configure the IP Phone Figure G 2 Test When you press DSS Key 1 2 the pho...

Page 148: ...raud and the system failure or calls loss Notes 1 In this guide the configuration options marked with only exist in X 18 XX XX and above versions 2 We recommend upgrading the firmware to the latest ed...

Page 149: ...l phones are well configured Figure H 0 2 3 Firewall In this page the basic information of firewall rules are displayed We recommend configuring it step by step following part 2 of this manual Figure...

Page 150: ...the default password System System Preferences Change Password Figure H 1 2 A strong password needs to be configured here for all accounts Especially account admin and user 1 2 Extension Hackers are a...

Page 151: ...IP Settings General UDP Port Figure H 1 3 We recommend changing this to another available port for example 5080 1 2 2 Change the default password The password of the extensions is pincode extension nu...

Page 152: ...can register this extension All the other registry requests will be denied The format is IP address Subnet mask e g 192 168 5 136 255 255 255 255 In this way only 192 168 5 136 can register this exten...

Page 153: ...ntegrity Several versions of the protocols are in widespread use in applications such as web browsing electronic mail Internet faxing instant messaging and Voice over IP VoIP TLS is supported in MyPBX...

Page 154: ...c logic to configure firewall is Allow all trusted IP addresses and then enable Drop All Step1 Enable firewall on firewall page of MyPBX System Firewall Settings Firewall Rules General Settings Figure...

Page 155: ...re H 2 2 Step3 Add common rules to allow remote administrators extensions or devices For example the public IP is 110 30 25 152 we can allow all ports for this trusted IP Name Remote Protocol BOTH Por...

Page 156: ...tting public static IP for security purpose Step4 Add common rules to accept the static public IP range of VoIP provider The ports used to contact the SIP provider is 5060 and 10000 12000 by default i...

Page 157: ...port range Name RTP Protocol UDP Port 10000 12000 IP 110 111 132 6 255 255 255 255 Action Accept Figure H 2 5 Note If the media server of SIP provider is dynamic and we cannot collect the IP range We...

Page 158: ...4 Name RTP_ALL Protocol UDP Port 10000 12000 IP 0 0 0 0 0 0 0 0 Action Accept Figure H 2 6 In this case MyPBX can get rid of one way volume issue Step5 Block the web connection of the other IP address...

Page 159: ...static one or it belongs to a range If it s Dyndns there is no need to configure this rule but the IP blacklist should be kept and Drop All should not be ticked For example the SMTP server is 110 30 1...

Page 160: ...klist rules for port 5060 Rule No 1 Port 5060 Protocol UDP IP Packets 120 Time Interval 60 seconds Figure H 2 8 Rule No 2 Port 5060 Protocol UDP IP Packets 40 Time Interval 2 seconds Figure H 2 9 2 Ad...

Page 161: ...ccess or the server might not be accessed Figure H 2 11 Notes 1 After enabling Drop All the rules of auto defense and IP blacklist will not take effect It means except the IPs and packets which are de...

Page 162: ...MyPBX SOHO Administrator Guide 162 204 Figure H 2 12 Figure H 2 13 3 Service security 3 1 Disable Guest Call 3 2 Disable Guest calls...

Page 163: ...keep it to No for general use 3 2 SSH access enhancement 3 2 1 Disable SSH Select LAN Settings Enable SSH If external debugging isn t required please select No Figure H 3 2 Note SSH access is disabled...

Page 164: ...MyPBX SOHO Administrator Guide 164 204 1 Log in via putty exe Figure H 3 3 2 The default username is root and the default password is ys123456 Figure H 3 4...

Page 165: ...mands or read events over a TCP IP stream Integrators will find this particularly useful when trying to track the state of a telephony client inside Asterisk and directing that client based on custom...

Page 166: ...Click System System Preferences AMI Settings For example the AMI account I want is User name Developer Password Developer The only IP address that s allowed to log in is 192 168 1 71 We can configure...

Page 167: ...tect the configuration files of MyPBX Click System Security Center Service to disable it directly Figure H 3 9 3 5 Database Grant MyPBX has integrated MySQL since x 18 0 xx which provides convenience...

Page 168: ...e 168 204 party software you need to set up this first For example username Harry password Harry123 Figure H 3 10 Save it and apply the changes Figure H 3 11 When logging in using other software we ca...

Page 169: ...IP to auto IP Blacklist and notify the user if it match the protection rule Example Configure to notify extension 500 outbound number 5503301 and E mail alert yeastar com configuration could be as be...

Page 170: ...utes and notify the user Example Configure to notify extension 500 outbound number 5503301 and E mail alert yeastar com configuration could be as below Phone Notification Settings Phone Notification Y...

Page 171: ...N ISDN provider for help to limit the credit of international calls in advance then the hacker cannot dial international calls Each provider has its own policy You can also ask provider to disable int...

Page 172: ...the dot here Password 5503333 Choose the allowed extension and the trunk to the right side like this Figure H 4 1 Save and apply the changes when 300 and 301 pick up headsets and dial a international...

Page 173: ...alid SIP trunk in PBX VoIP trunk Service Provider The IP address can be an invalid one like 127 0 0 1 Figure H 4 2 Save it and apply the changes The status of this trunk is unreachable of course That...

Page 174: ...MyPBX SOHO Administrator Guide 174 204 Figure H 4 3 Save it and apply the changes Then click the arrow at the left side to set it to the top Figure H 4 4...

Page 175: ...IP settings General to get the settings about TLS which is disabled by default If you are using MyPBX SOHO please find it in Internal Settings SIP Settings page Figure I 1 TLS Port Port use for Sip re...

Page 176: ...hod of IP phone you can contact the manufacturer of the IP phone to get that 3 You need to reboot MyPBX to take effect after enabling TLS 2 Prepare the whole certificates for TLS Here are the certific...

Page 177: ...A crt for IP phone and MyPBX Client bat make the client pem it s the IP phone s server certificate Server bat make the asterisk pem it s the MyPBX s server certificate Here are the steps to make all t...

Page 178: ...MyPBX SOHO Administrator Guide 178 204 Figure I 4 Just follow the guide to input the information of MyPBX step by step In this example MyPBX s IP address is 192 168 4 142...

Page 179: ...MyPBX SOHO Administrator Guide 179 204 Figure I 5...

Page 180: ...MyPBX SOHO Administrator Guide 180 204 Figure I 6 This ca crt is the same as the one in folder TLS_CA_Tool ca trusted Figure I 7...

Page 181: ...istrator Guide 181 204 MyPBX s CA CA crt is generated successfully Step2 Prepare asterisk pem MyPBX s server certificate We need the CA crt and CA key to make the server certificate Double click serve...

Page 182: ...MyPBX SOHO Administrator Guide 182 204 Follow the guide to input information step by step and make sure the information you have input matches the one you have input in Step1 Figure I 9...

Page 183: ...input y to continue When done you can find the asterisk pem as the following picture shows Figure I 10 asterisk pem the MyPBX s server certificate is generated successfully Note We can copy the asteri...

Page 184: ...MyPBX SOHO Administrator Guide 184 204 Figure I 11 Step3 Prepare the IP phone s certificate ca crt Double click ca bat input the information of IP phone step by step...

Page 185: ...MyPBX SOHO Administrator Guide 185 204 Figure I 12 In this example the IP phone s IP address is 192 168 4 71 Figure I 13...

Page 186: ...MyPBX SOHO Administrator Guide 186 204 When done we can find the ca crt in this folder Figure I 14 The ca crt in folder TLS_CA_Tool ca trusted is the same as the above one...

Page 187: ...n CA for IP phone you can rename it to CA crt and copy it to folder TLS_CA_Tool ca trusted before making the client pem Step4 Prepare client pem the IP phone s server certificate Double click client b...

Page 188: ...MyPBX SOHO Administrator Guide 188 204 Figure I 17...

Page 189: ...or Guide 189 204 Confirm all the information we input before clicking y to finish this guide Figure I 18 The IP phone s server certificate is ready Note We can copy the client pem ca crt to another fo...

Page 190: ...All the certificates are prepared 3 Upload certificates 3 1 Upload IP phone s certificates In this example IP phone s model is Yealink T28 Step1 Upload IP phone s server certificate client pem Click...

Page 191: ...hen uploaded successfully to take effect Figure I 21 When IP phone boots up again we can check the certificate status Figure I 22 Step2 Upload the trusted certificate The trusted certificate is the ca...

Page 192: ...MyPBX SOHO Administrator Guide 192 204 Figure I 23 Figure I 24 When done we can check the content of CA crt like the picture shown below...

Page 193: ...example the model of MyPBX is MyPBX U200 firmware version 15 18 0 22 Step1 Upload MyPBX s server certificate asterisk pem Click PBX Advanced Settings Certificates then click Upload Certificates choos...

Page 194: ...o reboot MypBX When done we can move to Step 2 Figure I 28 Step2 Upload the trusted certificate The trusted certificate in MyPBX should be the ca crt of IP phone Click Upload Certificates and choose T...

Page 195: ...tificates in MyPBX side are well uploaded 4 Register IP phone to MyPBX via TLS Before registering IP phone to MyPBX we need to create a SIP extension in MyPBX side in advance or edit the existing one...

Page 196: ...MyPBX SOHO Administrator Guide 196 204 Figure I 31 Open IP phone s configuration page input the registry information of extension 303...

Page 197: ...atus page of MyPBX Figure I 33 If you have any problems about extension s registry please run a packet trace in Reports System Logs Packet Capture Tool input IP phone s IP address choose the eth port...

Page 198: ...e 198 204 I 2 How to register SIP trunk to VoIP provider via TLS If you have got the SIP trunk from provider that is using TLS we can configure it in MyPBX and choose TLS within the trunk here are two...

Page 199: ...MyPBX SOHO Administrator Guide 199 204 Figure I 35 Service provider trunk P P...

Page 200: ...nistrator Guide 200 204 Figure I 36 If you have got problem when registering to provider via TLS you can also run a packet trace in System Log page using Packet Capture Tool then send it to provider o...

Page 201: ...at you can search a key word from your IP phone Here we take Yealink T 28 IP phone as an example 1 Configuration on MyPBX Tick the option of Enable LDAP and use default configuration in the other fiel...

Page 202: ...c yeastar dc com Password the password you have set on MyPBX Max Hits 50 LDAP Name Attributes cn sn displayName LDAP Number Attributes telephoneNumber homePhone mobile mail departmentNumber LDAP Displ...

Page 203: ...MyPBX SOHO Administrator Guide 203 204 Figure K 3 If you enable the LDAP Lookup for PreDial Dial you can use LDAP feature either in PreDial Dial page or by pressing DSS Key Finish...

Page 204: ......