Sip Trunk

[mleitao]

Is there away to disable a SIP trunk from calling out of the system? I have one configured and it is working correctly, however I'm concerned that someone may figure out how to hack it and access our system. Since the trunk only needs to go to an internal extension, I was wondering if anyone knew how to disable external calls coming from the trunk. I was looking in Class Of Service, however I didn't find anything that stood out.
Michael

[x-man]

Lass of restriction. Give it one that has every class number in it. makes it impossible to make a trunk call.

[mleitao]

Where do I put that in the SIP Peer Profile?

[johnp]

If there is no route programmed to use it, nobody behind the pbx can use it to call. It still may be possible to hack if coming through the public network.

[mleitao]

I got it it was in Trunk Attributes. Thanks@x-man

[mleitao]

I made this change however I think it might be wrong because I can't even make a internal call. Does anyone know where to change that in Class of Service?

[johnp]

He was referring to the cor on any outbound routes that utilize this trunk group

[mleitao]

That's where I put it in.

[ralph]

If you can't dial internal extensions when changing the COR in the trunk attribs form for the SIP trunks, then look at the form "ARS Maximum Dialed Digits" and be sure it can at least dial the number of digits for your extensions.

Ralph

[x-man]

Enter the COR number for the trunk. This COR number must not have been assigned to a station (mandatory field).

Find one that stations don't use.

[mleitao]

Here is what I have
Class of Restriction
  -Number =20 -Class of Restriction for Group = 1-110

Trunk Attributes
  -Trunk Service Port=4
  -Release Link Trunk=no
  -Call Recognition=off
  -Class of Service = 9
  -Class of Restriction =20
  -Baud=300
  -Intercept Number = 1
  -Trunk Label = MyTrunk

Sip Peer Profile
  -Network Element = My Network
  -Sip Peer Profile Label = MyPeer
  -Outbound Proxy Server=
  -CPN Restriction=No
  -Trunk Service=4
  -Session Timer=0
  -Zone  =1

So Calls are now being routed to internal and external, I 'm going to try what Ralph has suggested and limit the Dialed Digits
Michael

[mleitao]

I had success with ARS Maximum Dialed Digits, but I would still like to find a better way of restricting outbound from that sip peer altogether.
Thanks for everyone's help Michael

[ralph]

The absolute most secure way of blocking SIP trunks from dialing back out of your system is to use interconnect restriction.
To use, edit the interconnect restriction table and in row 2 restrict 2. 
Then assign interconnect restriction 2 to the SIP trunks in it's peer profile. 

Ralph