access_controls.rst 1.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. ****************
  2. Access Controls
  3. ****************
  4. Access control list can allow or deny ranges of IP addresses. There are several purposes for using the ACL.
  5. **providers - access conroll list**
  6. * The main purpose of the Providers list is for your voip provider (carrier) IP addresses to the CIDR.
  7. * Be careful with what and how you use ACL.
  8. * Most common mistakes result in calls not working between extensions and other undesirable results.
  9. * Be sure to keep **providers** access control (formerly called domains) to default deny.
  10. * Do not put your public ip or phone IP addresses in the domains access control list.
  11. * Don't supply both the domain and the cidr on the same node.
  12. * If adding a single IP address to the CIDR field make sure to add /32 on the end of the IP address.
  13. Access Control Example
  14. -----------------------
  15. Goto Advanced > Access Controls. Click the edit icon for **providers** was renamed from **domains**. At the bottom under **nodes** click the plus icon. In the example below make sure to change the 12.34.56.0 to your VoIP providers IP address if adding to the Providers access control list.
  16. ::
  17. Type choose allow
  18. CIDR enter the 12.34.56.0/32
  19. Domain (Leave Blank, used for advanced scenarios)
  20. Description (Carrier Name)
  21. Click save
  22. Goto > Status > Sip Status and click **reloadacl**.
  23. Under Status > log viewer you should notice the ip added. This can be seen also from command line fs_cli by using **reloadacl**
  24. ::
  25. [NOTICE] switch_utils.c:545 Adding 12.34.56.0/32 (allow) [] to list domains