PFsense getting digital voice to work?
-
@stephenw10
i haven't tried anything as I'm not to sure what id need.i upgraded from g.fast to fibre so had to switch back to isp`s router.
Paul
-
Ok, so using VoIP with an ISP supplied router? What hardware is that? If that's not connected what does pfSense connect to? On ONT? The fiber directly?
-
@stephenw10
Pfsense was connected via ethernet to a modem but now we have an ONT. Not sure what connector i need to go from the fibre cable to pcie device >pfsense. -
So the ISP router has a phone socket directly? I've no idea what you're actually trying to connect here.
-
i am trying to find out how to configure digital voice within pfsense, The ISP router is connected to the ONT via Ethernet cable.
-
Ok so I'm assuming 'digital voice' is what your ISP is branding their VoIP offering that's supplied with fibre when there's no copper line?
In which case I'd expect their router to have a phone socket on it so you can actually connect a phone. And if that's the case what are you expecting to connect to it when pfSense replaces the ISP router?
-
@stephenw10
great question, what can connect my home phone to? -
OK, more simply:
Who is your ISP? What is "digital voice"?Otherwise I'm just guessing.
What phone are you using now? What is it connected to?
-
@stephenw10
My ISP is zen internet, Digital Voice is the name of BT's digital telephone service.I am using FRITZ!Box 7530 AX that has a FON port on the back which i have a DECT base station plugged into.
https://en.avm.de/products/fritzbox/fritzbox-7530-ax/technical-specifications/
-
Hmm, interesting. So some initial googling here shows it will only work with the supplied ISP router. However that's probably not the full story. Everything is just a matter of code!
But it doesn't look easy. Using a 3rd part VoIP provider would be far easier.
-
Yup further research seems to confirm that. If you're using BT residential service with Digital Voice it will only work with their supplied router. Whilst it might be technically possible to connect to it with a standard VoIP/SIP device BT at least will not give you the details required to do it.
Now you are not actually with BT so Zen may be more flexible. However the fact they are using the same name for the service implies they may have just chosen to use BT to provide that in which case.... -
@stephenw10
hello would the these settings help ?
https://www.zen.co.uk/help-support/general-sip-settings/Paul
-
Hmm, possibly, if that's what they're using for VoIP over FTTP.
However I suspect that's for their business offering and Digital Voice is different.
-
@wheelhouse20 I have Zen FTTP and their digital voice service working behind pfSense. I use a Gigaset N300A IP DECT/VoIP base station on its own VLAN and it works flawlessly with a number of Gigaset handsets. I do not use the Zen supplied Fritzbox for this.
There''s a lengthy discussion on the Think Broadband forum which starts off with this can't be done and ends with solutions. It's worth a read for some pointers and mentions alternative options to the N300A IP.
You need to ask Zen for your 'Digital Voice' password. They will give you that no problem. The N300A IP is configured with these credentials and the Zen server details.
On my Netgate 5100, I've created a port forwarding and WAN rule from the Zen VoIP IP address to the N300A for the SIP protocol (port 5060 UDP) along with firewall and NAT rules for the VoIP VLAN.
-
@bigsy Sorry to jump on this thread. Have you also forwarded the full range of RTP ports that the N300IP opens?
Reason I ask is I have the same Gigaset DECT base and, since trying to diagnose some disconnected call issues, may have ended up forwarding more ports than I need to. I do however restrict the range of allowed remote IPs to that of my SIP providers.
Could you give more detail on your nat/forwarding/firewall rules? Cheers. -
Ooo nice. Well there you go just standard SIP if you know the credentials. Choose your ISP wisely!
-
@darcey I'm only forwarding the SIP port from a single VoIP address at Zen. I have not had to forward the RTP ports but have added them to the outgoing firewall rules for the VoIP VLAN to help lock it down a bit.
-
@bigsy Thanks. I tried reading up on this but couldn't find an answer.
From your working config, it seems RTP connections are always initiated by the client (N300IP) regardless of whether the call is incoming or outgoing. Meaning, no port forward or firewall rule needed on the WAN in respect of incoming RTP.
I am wondering if the same applies when running a PBX and trunk connection to an external SIP provider.Since switching to VoIP, I played with a couple of devices (Cisco ATA and Gigaset N300) as well as asterisk.
Currently, with asterisk, I foward UDP SIP obviously. But also (a large range of) RTP ports to the PBX.
I also added static port NAT for all outgoing UDP from the PBX. This works but I'm wondering if I actually need to port forward those RTP ports with asterisk.
I'm guessing the requirements may be different, SIP client (such as N300IP) vs asterisk & PBX trunk. -
I would expect this to work like any other SIP connection. If you're just running phones behind the firewall connecting the Zens PBX you shouldn't need anything forwarded.
If you're running a PBX then you would need traffic forwarded to it.
-
@bigsy Jumping in on this thread as I've just had DV activated on Zen Internet and am also using a N300IP behind a pfSense firewall.
I can make calls without problems, but I'm unable to receive incoming calls. When someone dials my number it cuts off straight away without even ringing either at my end or at the caller's end.
I've created:
-
a NAT port forward from any source address port tcp/udp 5060 on my WAN to port 5060 on the internal IP of my N300IP,
-
inbound rules allowing all udp traffic from 62.3.88.0/28 and 62.3.88.16/28 to my WAN address
-
inbound rules from both 212.23.7.235 and 212.23.7.228 to udp 5060 on my WAN.
I've also got an outbound NAT rule for all traffic from my N300IP to use static ports
I've tested it with the Fritz!Box on the WAN and that works for outbound and inbound calls, so Zen won't support me any further.
Could anyone give me any pointers on what to look at next?
-