Page MenuHomePhabricator

Acrobits Groundwire
Updated 1,021 Days AgoPublic

Goal is to create a reliable and secure configuration for inbound calls, where the account is shared with another desktop Snom 370 SIP-phone.

Account

User Details

Username2233XXXXXX
Domainsip2sip.info
Display Name<empty>

Advanced settings

Incoming CallsOn with Backgrounding
NAT TraversalICE
Proxyproxy.sipthor.net:443
Auth User Name<empty>
Transport Protocoltls (sips)
VoiceMail Number<empty>
Expires86400
Caller ID<empty>
Caller Id MethodFrom Username

Sets caller ID headers of outgoing INVITE messages. Most VoIP providers will ignore these headers though.

SIMPLEOff

Enables SIP/SIMPLE messages to be sent and received.

Backgrounding Options

Host<empty>
Transport Protocoltls (sips)
Expires86400
Track ErrorsOn

NAT Traversal

MediaICE
Send Media BackOff

Ensures that media streams are sent to the IP:port they are received from.

STUN Serverstun1.dns-hosting.info:3478
TURN Username<empty>
TURN Password<empty>
Ignore Symmetric NATOff
Discover Global IPInternal

For providers requiring global IP discovery use External. For others you should be safe with Static or Internal. Static uses a faked private IP:port pair to solve issues when you are behind NAT and your provider groups registrations based on the full Contact URI. This option prevents changes in Contact header when network conditions change. To specify your own IP:port pair go to the Hacks section.

Send keepalivesOff

Send keepalive packets to keep the NAT ports open. Set if you have troubles getting incoming calls.

Outbound Proxy EnabledOff

Optionally set to a proxy that performs some traffic manipulation e.g. TLS to UDP translation. This proxy is usually not related to the SIP provider. If regular proxy is specified as well, the SIP traffic will be routed to the proxy on the second hop.
Use the Outbound Proxy to route all SIP traffic through one server.

Codecs for WiFi

  1. Opus Wideband
  2. G.722
  3. Opus Narrowband
  4. iLBC
  5. G.711 u-Law
  6. G.711 a-Law
  7. G.729a
  8. GSM
Packet Time20ms
Force Packet TimeOff

Higher packet times save bandwidth, but make the call quality more sensitive to packet loss. Bigger lost packets will make longer, more audible dropouts.

Honor Remote CodecsOn

If set, local codec order will be ignored and the first supported codec from the list sent by remote will be used.

Codecs for 3G

  1. iLBC
  2. Opus Narrowband
  3. GSM
  4. G.729a
  5. G.711 u-Law
  6. G.711 a-Law
  7. Opus Wideband
  8. G.722
Packet Time20ms
Force Packet TimeOff
Honor Remote CodecsOff

DTMF Mode

Enabled DTMF Modes
  1. RFC2833
  2. SIP INFO
  3. audio
Send Al EnabledOff

When turned on all enabled DTMF methods are sent simultaneously. If pressing a single digit results in multiple presses on the receiver side, just turn this switch off.

Secure Calls

SDES (RFC 4568)
Incoming CallsEnabled
Outgoing CallsBest Effort

A secure signaling channel is required for SDES. I.e. the protocol needs to be set to TLS. Due to security concerns it's also disabled for pushed calls. Please note SDES is prone to man-in-the-middle attacks and is largely dependant on the behavior of proxies along the SIP path. There may be hops between which the keys are transfered in clear text. If you would like to use SRTP over an insecure signaling channel you should try ZRTP instead.

ZRTP
Incoming CallsEnable
Outgoing CallsDisable

ZRTP is a media path key exchange method for SRTP. It can be used to secure calls even over insecure signaling channel (e.g. UDP). As opposed to SDES, it prevents eavesdropping opportunities at proxies. You will be able to accept ZRTP encrypted calls, however to initiate them you need to purchase the ZRTP add-on.

Hacks

RTP Port Start10000
RTP Port End65535
SIP Port<empty>

The listening port for SIP.

Forced Contact
Contact IP:port<empty>

Fake fixed local IP and port can help if you are behind NAT and your provider groups registrations based on the full Contact URI. This setting prevents changes in Contact header when network conditions change. You should pick an IP from RFC 1918 range. E.g. 192.168.1.100:44444. Make sure to set Discover Global IP to Static to use this field.

Authorization
Send On RequestOff

Some providers do not like getting the Authorization header unless requested.

URI Schemesip:

The default scheme for numerical URIs is sip: or sips:. You can select tel: to enable support for RFC 3966 tel: URIs.

Nortelnetworks
Proxy-RequireOff

Some setups need Proxy-Require: com.nortelnetworks.firewall header to successfully traverse NAT.

SRTP
Prefer 80-bit TagsOff

Prefer 80-bit authentication tags over 32-bit tags.

Registration State
ReuseOn
Adjust ViaOff

The new registration will reuse the same Call-ID, CSeq sequence and rinstance as the previous one. We try to unregister stale contacts when network change. It's possible to alter Via headers to reflect Contact being unregistered.

Well-known codecs
Use rtpmapOff

It's not necessary to include rtpmap attributes for well known codecs, but some providers erroneously require it.

Last Author
tijmen
Last Edited
Dec 27 2016, 12:05 PM

Event Timeline

tijmen edited the content of this document. (Show Details)Dec 27 2016, 12:03 PM
tijmen edited the content of this document. (Show Details)