In my commercial routers I never port forward anything. Simply open firewall rules to allow incoming traffic.. But yes.
SIP can be 5078-5079 from Voipo usually. Mine are all 5060 as that is what Ive asked.
RTP depends on device. Grandsteam by default starts at 5004. My firewall rules are 5004-5059 (Grandsteam)
Linksys devices by default are 16384-16482 way overkill. When I have a Linksys/Cisco i mirror these in the firewall.
If the public IP is on the Calix device then anything behind it is behind NAT. If the Gargoyle device is in standard router mode then it is also a NAT device. Anything behind it is double NAT'd.In normal operation, a gateway/access point is not in bridge mode. Hence my correct statement.
Not sure what I am missing?
If you look at your Voipo dashboard there is a page that shows connected devices.. https://account.voipo.com/features/devices
In my case-
3455551212
Username:3455551212
Received:sip:9x.1xx.1xx.1xx:5060
Contact:sip:3455551212@172.25.125.20:5060;user=pho ne
Expires:2017-12-31 18:04:04
User Agent:Grandstream HT-502 V1.2A 1.0.3.10
Connected To:VOIPo Central
Notice the Recieved IP address (which Ive obfuscated) is my public IP address. Received however contains my private space IP address. This is in the return SIP header. This is how the Voipo servers know where I am and where my device is behind NAT and why I do not need to port forward to get to them. This is also why I can run more than one ATA on port 5060 on my system. If I port forward 5060 to one ATA I cannot port it to another.
The reason Voipo and other companies tell you to port forward on a SOHO router is because this also opens up the corresponding firewall rule on that router as there is no way to do it separately. Im not sure if your running into the problem of trying to use more than one ATA or not but figured Id mention it. I do here. Only one of my customers also do.
When your double NAT'd your device and their servers can get very confused.
Based on your comment- "The Calix Access Point is the only device on a public IP" Im still assuming that your ATA(s) are double NAT'd.
Bookmarks