Mitel Forums - The Unofficial Source

Mitel Forums => Mitel MiVoice Business/MCD/3300 => Topic started by: mleitao on April 28, 2015, 01:46:24 PM

Title: Sip Trunk
Post by: mleitao on April 28, 2015, 01:46:24 PM

Is there away to disable a SIP trunk from calling out of the system? I have one configured and it is working correctly, however I'm concerned that someone may figure out how to hack it and access our system. Since the trunk only needs to go to an internal extension, I was wondering if anyone knew how to disable external calls coming from the trunk. I was looking in Class Of Service, however I didn't find anything that stood out.
Michael

Title: Re: Sip Trunk
Post by: x-man on April 28, 2015, 01:51:07 PM

Lass of restriction. Give it one that has every class number in it. makes it impossible to make a trunk call.

Title: Re: Sip Trunk
Post by: mleitao on April 28, 2015, 02:04:54 PM

Where do I put that in the SIP Peer Profile?

Title: Re: Sip Trunk
Post by: johnp on April 28, 2015, 02:07:02 PM

If there is no route programmed to use it, nobody behind the pbx can use it to call. It still may be possible to hack if coming through the public network.

Title: Re: Sip Trunk
Post by: mleitao on April 28, 2015, 02:11:26 PM

I got it it was in Trunk Attributes. Thanks@x-man

Title: Re: Sip Trunk
Post by: mleitao on April 28, 2015, 02:20:08 PM

I made this change however I think it might be wrong because I can't even make a internal call. Does anyone know where to change that in Class of Service?

Title: Re: Sip Trunk
Post by: johnp on April 28, 2015, 02:24:45 PM

He was referring to the cor on any outbound routes that utilize this trunk group

Title: Re: Sip Trunk
Post by: mleitao on April 28, 2015, 02:28:12 PM

That's where I put it in.

Title: Re: Sip Trunk
Post by: ralph on April 28, 2015, 02:32:00 PM

If you can't dial internal extensions when changing the COR in the trunk attribs form for the SIP trunks, then look at the form "ARS Maximum Dialed Digits" and be sure it can at least dial the number of digits for your extensions.

Ralph

Title: Re: Sip Trunk
Post by: x-man on April 28, 2015, 02:38:20 PM

Enter the COR number for the trunk. This COR number must not have been assigned to a station (mandatory field).

Find one that stations don't use.

Title: Re: Sip Trunk
Post by: mleitao on April 28, 2015, 02:44:41 PM

Here is what I have
Class of Restriction
  -Number =20 -Class of Restriction for Group = 1-110

Trunk Attributes
  -Trunk Service Port=4
  -Release Link Trunk=no
  -Call Recognition=off
  -Class of Service = 9
  -Class of Restriction =20
  -Baud=300
  -Intercept Number = 1
  -Trunk Label = MyTrunk

Sip Peer Profile
  -Network Element = My Network
  -Sip Peer Profile Label = MyPeer
  -Outbound Proxy Server=
  -CPN Restriction=No
  -Trunk Service=4
  -Session Timer=0
  -Zone  =1

So Calls are now being routed to internal and external, I 'm going to try what Ralph has suggested and limit the Dialed Digits
Michael

Title: Re: Sip Trunk
Post by: mleitao on April 28, 2015, 02:56:57 PM

I had success with ARS Maximum Dialed Digits, but I would still like to find a better way of restricting outbound from that sip peer altogether.
Thanks for everyone's help Michael

Title: Re: Sip Trunk
Post by: ralph on April 28, 2015, 03:10:53 PM

The absolute most secure way of blocking SIP trunks from dialing back out of your system is to use interconnect restriction.
To use, edit the interconnect restriction table and in row 2 restrict 2. 
Then assign interconnect restriction 2 to the SIP trunks in it's peer profile. 

Ralph