Author Topic: Sip Trunk  (Read 3001 times)

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Sip Trunk
« on: April 28, 2015, 01:46:24 PM »
Is there away to disable a SIP trunk from calling out of the system? I have one configured and it is working correctly, however I'm concerned that someone may figure out how to hack it and access our system. Since the trunk only needs to go to an internal extension, I was wondering if anyone knew how to disable external calls coming from the trunk. I was looking in Class Of Service, however I didn't find anything that stood out.
Michael


Offline x-man

  • Hero Member
  • *****
  • Posts: 1129
  • Country: gb
  • Karma: +25/-0
    • View Profile
Re: Sip Trunk
« Reply #1 on: April 28, 2015, 01:51:07 PM »
Lass of restriction. Give it one that has every class number in it. makes it impossible to make a trunk call.

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Re: Sip Trunk
« Reply #2 on: April 28, 2015, 02:04:54 PM »
Where do I put that in the SIP Peer Profile?

Offline johnp

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2202
  • Country: us
  • Karma: +66/-0
    • View Profile
Re: Sip Trunk
« Reply #3 on: April 28, 2015, 02:07:02 PM »
If there is no route programmed to use it, nobody behind the pbx can use it to call. It still may be possible to hack if coming through the public network.

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Re: Sip Trunk
« Reply #4 on: April 28, 2015, 02:11:26 PM »
I got it it was in Trunk Attributes. Thanks@x-man

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Re: Sip Trunk
« Reply #5 on: April 28, 2015, 02:20:08 PM »
I made this change however I think it might be wrong because I can't even make a internal call. Does anyone know where to change that in Class of Service?

Offline johnp

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2202
  • Country: us
  • Karma: +66/-0
    • View Profile
Re: Sip Trunk
« Reply #6 on: April 28, 2015, 02:24:45 PM »
He was referring to the cor on any outbound routes that utilize this trunk group

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Re: Sip Trunk
« Reply #7 on: April 28, 2015, 02:28:12 PM »
That's where I put it in.

Offline ralph

  • Mitel Forums Admin
  • Hero Member
  • *****
  • Posts: 5767
  • Country: us
  • Karma: +469/-0
  • Published Author: http://amzn.to/2dcYSY5
    • View Profile
Re: Sip Trunk
« Reply #8 on: April 28, 2015, 02:32:00 PM »
If you can't dial internal extensions when changing the COR in the trunk attribs form for the SIP trunks, then look at the form "ARS Maximum Dialed Digits" and be sure it can at least dial the number of digits for your extensions.

Ralph

Offline x-man

  • Hero Member
  • *****
  • Posts: 1129
  • Country: gb
  • Karma: +25/-0
    • View Profile
Re: Sip Trunk
« Reply #9 on: April 28, 2015, 02:38:20 PM »
Enter the COR number for the trunk. This COR number must not have been assigned to a station (mandatory field).

Find one that stations don't use.

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Re: Sip Trunk
« Reply #10 on: April 28, 2015, 02:44:41 PM »
Here is what I have
Class of Restriction
  -Number =20 -Class of Restriction for Group = 1-110

Trunk Attributes
  -Trunk Service Port=4
  -Release Link Trunk=no
  -Call Recognition=off
  -Class of Service = 9
  -Class of Restriction =20
  -Baud=300
  -Intercept Number = 1
  -Trunk Label = MyTrunk

Sip Peer Profile
  -Network Element = My Network
  -Sip Peer Profile Label = MyPeer
  -Outbound Proxy Server=
  -CPN Restriction=No
  -Trunk Service=4
  -Session Timer=0
  -Zone  =1

So Calls are now being routed to internal and external, I 'm going to try what Ralph has suggested and limit the Dialed Digits
Michael
« Last Edit: April 28, 2015, 02:52:40 PM by mleitao »

Offline mleitao

  • Jr. Member
  • **
  • Posts: 41
  • Country: us
  • Karma: +0/-0
    • View Profile
Re: Sip Trunk
« Reply #11 on: April 28, 2015, 02:56:57 PM »
I had success with ARS Maximum Dialed Digits, but I would still like to find a better way of restricting outbound from that sip peer altogether.
Thanks for everyone's help Michael

Offline ralph

  • Mitel Forums Admin
  • Hero Member
  • *****
  • Posts: 5767
  • Country: us
  • Karma: +469/-0
  • Published Author: http://amzn.to/2dcYSY5
    • View Profile
Re: Sip Trunk
« Reply #12 on: April 28, 2015, 03:10:53 PM »
The absolute most secure way of blocking SIP trunks from dialing back out of your system is to use interconnect restriction.
To use, edit the interconnect restriction table and in row 2 restrict 2. 
Then assign interconnect restriction 2 to the SIP trunks in it's peer profile. 

Ralph


 

Sitemap 1 2 3 4 5 6 7 8 9 10