Skip to content

Commit

Permalink
Reorganize sections Add Hardware section. (#162)
Browse files Browse the repository at this point in the history
* Create hardware.rst

* Update hardware.rst

* Update index.rst

* Update other.rst

* Create firewalls.rst

* Create firewall_devices.rst

* Update and rename source/hardware/firewall_devices.rst to source/hardware/firewall_devices/asus_rt_ac66u.rst

* Update hardware.rst

* Update firewalls.rst

* Update firewalls.rst

* Update hardware.rst

* Update firewalls.rst

* Update hardware.rst

* Update hardware.rst

* Update hardware.rst

* Update hardware.rst

* Update hardware.rst

* Update firewall_devices.rst

* Update firewall_devices.rst

* Update firewall.rst

* Update hardware.rst

* Update provision_auto_yealink.rst

* Update provision_auto_polycom.rst
  • Loading branch information
Len-PGH authored and markjcrane committed Dec 12, 2018
1 parent 4456938 commit d070cb1
Show file tree
Hide file tree
Showing 9 changed files with 234 additions and 76 deletions.
2 changes: 1 addition & 1 deletion source/applications/provision/provision_auto_polycom.rst
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
Polycom Automatic Provision
Polycom
============================


Expand Down
2 changes: 1 addition & 1 deletion source/applications/provision/provision_auto_yealink.rst
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
Yealink Automatic Provision
Yealink
============================


Expand Down
32 changes: 31 additions & 1 deletion source/firewall.rst
Original file line number Diff line number Diff line change
Expand Up @@ -21,4 +21,34 @@ Firewall
firewall/iptables.rst
firewall/fail2ban.rst
firewall/pf.rst
firewall/firewall_devices.rst


Firewall Devices
=====================

Firewall device settings that help with SIP connections.

.. toctree::
:maxdepth: 4

hardware/firewall_devices/asus_rt_ac66u.rst
firewall/firewall_devices/edgerouterx.rst
firewall/firewall_devices/pfsense.rst
firewall/firewall_devices/sonicwall_tz_soho.rst
firewall/firewall_devices/zyxel.rst



Firewall Devices ALG
========================

Most of the time this setting is set to off or disabled and varies. Rarely this should be enabled. Below is a list a devices that need setting changes to address SIP ALG issues.

.. toctree::
:maxdepth: 4

firewall/firewall_devices/asus_rt_ac66u_sip_alg.rst
firewall/firewall_devices/cisco_ea6500.rst
firewall/firewall_devices/sonicwall_tz_soho_sip_alg.rst
firewall/firewall_devices/zyxel_sip_alg.rst

76 changes: 28 additions & 48 deletions source/firewall/firewall_devices.rst
Original file line number Diff line number Diff line change
@@ -1,55 +1,35 @@
##################
******************
Firewall Devices
##################


**Devices**
^^^^^^^^^^^^^
Firewall device settings that help with SIP connections.

* `ASUS RT-AC66U-`_
* `Sonicwall_TZ_Soho-`_
* `Zyxel-`_
* `pfSense`_
* `Ubnt EdgerouterX`_



**SIP ALG**
^^^^^^^^^^^^^^^
Most of the time this setting is set to off or disabled and varies. Rarely this should be enabled. Below is a list a devices that need setting changes to address SIP ALG issues.

* `ASUS RT-AC66U`_
* `Cisco EA6500`_
* `Sonicwall_TZ_Soho`_
* `Zyxel`_















******************


Firewall Devices
=====================

Firewall device settings that help with SIP connections.

.. _Zyxel: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/zyxel_sip_alg.html
.. _Cisco EA6500: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/cisco_ea6500.html
.. _Zyxel-: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/zyxel.html
.. _ASUS RT-AC66U-: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/asus_rt_ac66u.html
.. _Asus RT-AC66U: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/asus_rt_ac66u_sip_alg.html
.. _Sonicwall_TZ_Soho: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/sonicwall_tz_soho_sip_alg.html
.. _Sonicwall_TZ_Soho-: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/sonicwall_tz_soho.html
.. _pfSense: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/pfsense.html
.. _Ubnt EdgerouterX: http://docs.fusionpbx.com/en/latest/firewall/firewall_devices/edgerouterx.html
.. toctree::
:maxdepth: 4

hardware/firewall_devices/asus_rt_ac66u.rst
firewall/firewall_devices/edgerouterx.rst
firewall/firewall_devices/pfsense.rst
firewall/firewall_devices/sonicwall_tz_soho.rst
firewall/firewall_devices/zyxel.rst



Firewall Devices ALG
========================

Most of the time this setting is set to off or disabled and varies. Rarely this should be enabled. Below is a list a devices that need setting changes to address SIP ALG issues.

.. toctree::
:maxdepth: 4

firewall/firewall_devices/asus_rt_ac66u_sip_alg.rst
firewall/firewall_devices/cisco_ea6500.rst
firewall/firewall_devices/sonicwall_tz_soho_sip_alg.rst
firewall/firewall_devices/zyxel_sip_alg.rst


81 changes: 81 additions & 0 deletions source/hardware.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,81 @@
*************
Hardware
*************



Auto Provision Phones
==============================

Auto provisioning is disabled by default. This is to give a chance to secure provisioning server with HTTP Authentication or CIDR. HTTP Authentication requires the phone to send hash of the combined username and password in order to get configuration. CIDR is an IP address restriction that can be used to restrict which IP addresses are allowed to get the device configuration. An example of CIDR is xxx.xxx.xxx.xxx/32 the /32 represents a single IP address. To set one of these values go to Advanced > Default Settings and find the Provision category from there used the edit button to set a value. After this is done it is safe to set enabled equal to true.

.. toctree::
:maxdepth: 4

applications/provision/provision_auto_yealink.rst
applications/provision/provision_auto_polycom.rst
applications/provision/provision_auto_cisco.rst
applications/provision/provision_auto_fanvil.rst
applications/provision/provision_auto_grandstream.rst
applications/provision/provision_auto_htek.rst
applications/provision/provision_auto_zoiper.rst




Manually Provision Phones
==============================

How to setup the device using the phone’s web interface.

.. toctree::
:maxdepth: 4

applications/provision/provision_manual_yealink.rst
applications/provision/provision_manual_polycom.rst
applications/provision/provision_manual_cisco.rst
applications/provision/provision_manual_fanvil.rst
applications/provision/provision_manual_grandstream.rst
applications/provision/provision_manual_htek.rst
applications/provision/provision_manual_zoiper.rst
applications/provision/provision_manual_snom.rst
applications/provision/phone_screen_capture.rst







Firewall Devices
=====================

Firewall device settings that help with SIP connections.

.. toctree::
:maxdepth: 4

hardware/firewall_devices/asus_rt_ac66u.rst
firewall/firewall_devices/edgerouterx.rst
firewall/firewall_devices/pfsense.rst
firewall/firewall_devices/sonicwall_tz_soho.rst
firewall/firewall_devices/zyxel.rst



Firewall Devices ALG
========================

Most of the time this setting is set to off or disabled and varies. Rarely this should be enabled. Below is a list a devices that need setting changes to address SIP ALG issues.

.. toctree::
:maxdepth: 4

firewall/firewall_devices/asus_rt_ac66u_sip_alg.rst
firewall/firewall_devices/cisco_ea6500.rst
firewall/firewall_devices/sonicwall_tz_soho_sip_alg.rst
firewall/firewall_devices/zyxel_sip_alg.rst




54 changes: 54 additions & 0 deletions source/hardware/firewall_devices/asus_rt_ac66u.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
##############
ASUS RT-AC66U
##############



This guide was created for the ASUS RT-AC66U router with Firmware Version 3.0.0.4.380_8120. FusionPBX is in the cloud with a public IP, and the ASUS RT-AC66U router is at the customer’s location with the extensions behind it. The RT-AC66U is a “prosumer” grade router. It has good performance for the dollar and is a good choice for home offices.



How to setup QoS



First, enable the QoS feature:

* Log into the router
* Click “Traffic Manager” on the left menu
* Click the “Enable QoS” button to turn it on. Once you do this, the Upload and Download Bandwidth boxes will appear.
* Enter in your Up/Down speeds. You can use http://beta.speedtest.net/ as noted.
* Click the Apply button and wait for the router to reboot.

.. image:: ../../_static/images/firewall/fusionpbx_asus_traffic_manager_qos.png
:scale: 85%


Next, assign the QoS rules.

* Log back into the router after rebooting, and go to Traffic Manager.
* On the top-right selection box, select “user-defined QoS rules” if it is not already selected
* Your settings may vary based on your environment, but you can use the image below as a good starting point.
* It is important to note that the default rules set “Web Surf” and “HTTPS” to highest priority. We don’t want that to compete with VOIP traffic, so reduce those to “High.”
* Click Apply.

.. image:: ../../_static/images/firewall/fusionpbx_asus_traffic_manager_qos_rules.png
:scale: 85%

.. Note::

An important note regarding Priorities



Another important area is the “user-defined priorities” section of Traffic Manager – QoS. As you can see, the default rules give a very large amount of the bandwidth share to the highest priority. This is very likely excessive for VOIP traffic. We don’t need much bandwidth, we just need to make sure we get prioritized traffic. You should adjust these to suit your environment.


.. image:: ../../_static/images/firewall/fusionpbx_asus_traffic_manager_qos_note.png
:scale: 85%






5 changes: 5 additions & 0 deletions source/hardware/firewalls.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
***********
Firewalls
***********


8 changes: 8 additions & 0 deletions source/index.rst
Original file line number Diff line number Diff line change
Expand Up @@ -158,6 +158,14 @@ Advanced
advanced.rst
Hardware
=============
.. toctree::
:maxdepth: 4
hardware.rst
Additional Information
=======================
Expand Down
50 changes: 25 additions & 25 deletions source/other.rst
Original file line number Diff line number Diff line change
Expand Up @@ -15,31 +15,31 @@ Other section is bits of info that needs indexed for the PDF to populate all sec
:maxdepth: 3
:glob:

firewall/firewall_devices/asus_rt_ac66u.rst
firewall/firewall_devices/asus_rt_ac66u_sip_alg.rst
firewall/firewall_devices/cisco_ea6500.rst
firewall/firewall_devices/edgerouterx.rst
firewall/firewall_devices/pfsense.rst
firewall/firewall_devices/sonicwall_tz_soho.rst
firewall/firewall_devices/sonicwall_tz_soho_sip_alg.rst
firewall/firewall_devices/zyxel.rst
firewall/firewall_devices/zyxel_sip_alg.rst
applications/provision/provision_auto_yealink.rst
applications/provision/provision_auto_polycom.rst
applications/provision/provision_auto_cisco.rst
applications/provision/provision_auto_fanvil.rst
applications/provision/provision_auto_grandstream.rst
applications/provision/provision_auto_htek.rst
applications/provision/provision_auto_zoiper.rst
applications/provision/provision_manual_yealink.rst
applications/provision/provision_manual_polycom.rst
applications/provision/provision_manual_cisco.rst
applications/provision/provision_manual_fanvil.rst
applications/provision/provision_manual_grandstream.rst
applications/provision/provision_manual_htek.rst
applications/provision/provision_manual_zoiper.rst
applications/provision/provision_manual_snom.rst
applications/provision/phone_screen_capture.rst
#firewall/firewall_devices/asus_rt_ac66u.rst
#firewall/firewall_devices/asus_rt_ac66u_sip_alg.rst
#firewall/firewall_devices/cisco_ea6500.rst
#firewall/firewall_devices/edgerouterx.rst
#firewall/firewall_devices/pfsense.rst
#firewall/firewall_devices/sonicwall_tz_soho.rst
#firewall/firewall_devices/sonicwall_tz_soho_sip_alg.rst
#firewall/firewall_devices/zyxel.rst
#firewall/firewall_devices/zyxel_sip_alg.rst
#applications/provision/provision_auto_yealink.rst
#applications/provision/provision_auto_polycom.rst
#applications/provision/provision_auto_cisco.rst
#applications/provision/provision_auto_fanvil.rst
#applications/provision/provision_auto_grandstream.rst
#applications/provision/provision_auto_htek.rst
#applications/provision/provision_auto_zoiper.rst
#applications/provision/provision_manual_yealink.rst
#applications/provision/provision_manual_polycom.rst
#applications/provision/provision_manual_cisco.rst
#applications/provision/provision_manual_fanvil.rst
#applications/provision/provision_manual_grandstream.rst
#applications/provision/provision_manual_htek.rst
#applications/provision/provision_manual_zoiper.rst
#applications/provision/provision_manual_snom.rst
#applications/provision/phone_screen_capture.rst
applications/xmpp.rst
applications_optional/webrtc.rst
additional_information/sngrep.rst
Expand Down

0 comments on commit d070cb1

Please sign in to comment.