SmartPBX Firewall Configuration

SmartPBX Firewall Configuration

Configuring your firewall correctly is crucial to ensure seamless communication with SmartPBX. This section provides guidance on the firewall settings required for optimal functionality.

Ports Used by SmartPBX

SmartPBX relies on specific ports for communication. Make sure the following ports are open on your firewall:

  • Port 443 (HTTPS): Required for secure web access and provisioning. Allow outbound (and inbound only if specifically requested by SmartPBX Support).
  • SIP Signaling (Outbound):
    UDP/TCP 5060–5062 (standard SIP, TLS-capable on 5061) and UDP/TCP 36000 (additional SIP port as required). Allow outbound.
  • RTP Media (Outbound):
    Default RTP range: UDP 16384–32768. Allow outbound to permit audio/media streams.
  • Supporting Services (Outbound):
    UDP/TCP 53 (DNS), UDP 123 (NTP), and TCP 80/443 (provisioning/firmware if used).

Configuring Inbound and Outbound Rules

Inbound Rules

  1. No inbound rules are required for a standard deployment of SmartPBX. A SmartPBX engineer or support rep may ask that a port be opened inbound on your firewall for specific use cases.

Outbound Rules

  1. Port 443 (HTTPS):
    • Allow outbound traffic on 443 for secure access and provisioning.
  2. SIP Signaling:
    • Allow outbound UDP/TCP 5060–5062 and UDP/TCP 36000.
  3. RTP Media:
    • Allow outbound UDP 16384–32768.
  4. Supporting Services:
    • DNS: UDP/TCP 53
    • NTP: UDP 123
    • Provisioning/Firmware (if applicable): TCP 80/443

Testing Your Firewall Configuration

After configuring your firewall, it’s essential to test the setup to ensure that SmartPBX functions correctly. Follow these steps:

  1. Browse to pbx.smartpbx.io and confirm login over HTTPS (443).
  2. From a phone LAN, resolve and ping your SmartPBX/provisioning FQDN to validate DNS (53).
  3. Place a test call (SIP 5060–5062 / 36000) and verify two-way audio (RTP 16384–32768 UDP).
  4. Confirm the phone’s date/time is correct (NTP 123), then reboot the phone to re-register.

Troubleshooting Firewall Issues

If you experience difficulties accessing or using SmartPBX after configuring your firewall, consult the Troubleshooting IP Phone Connectivity guide for common network issues and solutions. You can also reach our Support Team for personalized assistance.