IP Address Ranges
Untuk melanjutkan operasi layanan suara Anda, semua alamat IP di bawah ini harus ditambahkan ke konfigurasi firewall Anda.iiNet menggunakan failover otomatis ke kluster yang tersedia berikutnya selama pemeliharaan dan kesalahan, oleh karena itu peralatan Anda harus dapat menghubungkan semua cluster kapan saja untuk menjaga keandalan.
| Service/Locations | IP Subnets (CIDR) | IP Network Range |
| National Services (Session Balancing) | 203.173.44.0/24 |
|
| Brisbane Network (Signalling & Media) | 203.55.228.192/26 |
|
| Sydney SBC Cluster (Signalling & Media) | 203.55.231.192/26 |
|
| Melbourne SBC Cluster (Signalling & Media) | 203.55.229.192/26 |
|
| Adelaide SBC Cluster (Signalling & Media) | 203.2.134.0/25 |
|
| Perth SBC Cluster (Signalling & Media) | 203.59.49.0/26 |
|
| Configuration and Firmware (Business Voice services) |
| |
DNS Servers (for iiNet Internet Customers) |
|
|
NTP Server (Time Sync) (for iiNet Internet Customers) |
|
|
Protocols and Ports
Protocol Name | UDP/TCP | Ports used by Protocol |
| SIP (VoIP Signalling) | Both UDP & TCP | 5060, 5061 & 5070 |
| RTP (VoIP Audio/Video) | UDP Only | 15000-49999 |
| DNS | Both UDP & TCP | 53 |
| NTP (Time Sync) | UDP Only | 123 |
| Configuration and Firmware (Business Voice services) | TCP Only | 80 & 443 |
Example configuration
A configuration example in normal show mode:
user@SRX-ROUTER> show configuration firewall family inet filter iiNet-Voice
/* iiVoip - National Services Block */
term SERVICES {
from {
address {
203.173.44.0/24;
}
}
then accept;
}
/* iiVoip - National SBC Networks */
term NETWORK {
from {
address {
203.55.228.192/26;
203.55.231.192/26;
203.55.229.192/26;
203.2.134.0/25;
203.59.49.0/26;
}
}
then accept;
}
/* iiVoip - National Configuration / DMS Services */
term CONFIGURATION {
from {
address {
203.55.231.64/27;
203.206.62.0/27;
}
}
then accept;
}
/* iiVoip – Supplemental services, DNS and NTP */
term SUPPLEMENTAL {
from {
address {
/* iiVoip - iiNet DNS and NTP */
203.0.178.191/32;
/* iiVoip - iiNet DNS */
203.215.29.191/32;
}
}
then accept;
}
/* Reject all other traffic */
term ELSE {
/* Logging of rejects is not recommended */
then {
log;
reject;
}
}
An example in “set” mode:
set firewall family inet filter iiNet-Voice term SERVICES from address 203.173.44.0/24
set firewall family inet filter iiNet-Voice term SERVICES then accept
set firewall family inet filter iiNet-Voice term NETWORK from address 203.55.228.192/26
set firewall family inet filter iiNet-Voice term NETWORK from address 203.55.231.192/26
set firewall family inet filter iiNet-Voice term NETWORK from address 203.55.229.192/26
set firewall family inet filter iiNet-Voice term NETWORK from address 203.2.134.0/25
set firewall family inet filter iiNet-Voice term NETWORK from address 203.59.49.0/26
set firewall family inet filter iiNet-Voice term NETWORK then accept
set firewall family inet filter iiNet-Voice term CONFIGURATION from address 203.55.231.64/27
set firewall family inet filter iiNet-Voice term CONFIGURATION from address 203.206.62.0/27
set firewall family inet filter iiNet-Voice term CONFIGURATION then accept
set firewall family inet filter iiNet-Voice term SUPPLEMENTAL from address 203.0.178.191/32
set firewall family inet filter iiNet-Voice term SUPPLEMENTAL from address 203.215.29.191/32
set firewall family inet filter iiNet-Voice term SUPPLEMENTAL then accept
set firewall family inet filter iiNet-Voice term ELSE then log
set firewall family inet filter iiNet-Voice term ELSE then reject
