access_controls.rst 1.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940
  1. ****************
  2. Access Controls
  3. ****************
  4. Access control list can allow or deny ranges of IP addresses. There are several purposes for using the ACL.
  5. * The main purpose is for your carriers ip addresses. Add the carrier IP addresses to the CIDR.
  6. * Be careful with what and how you use ACL.
  7. * Most common mistakes result in calls not working between extensions and other undesirable results.
  8. * Be sure to keep Domains access control to default deny.
  9. * Do not put your public ip or phone IP addresses in the domains access control list.
  10. * Don't supply both the domain and the cidr on the same node.
  11. * If adding a single IP address to the CIDR field make sure to add /32 on the end of the IP address.
  12. Access Control Example
  13. -----------------------
  14. Goto Advanced > Access Controls. Click the edit icon for **domains**. At the bottom under **nodes** click the plus icon.
  15. ::
  16. Type choose allow
  17. CIDR enter the 12.34.56.0/32
  18. Domain (Leave Blank, used for advanced scenarios)
  19. Description (Carrier Name)
  20. Click save
  21. Goto > Status > Sip Status and click **reloadacl**.
  22. Under Status > log viewer you should notice the ip added. This can be seen also from command line fs_cli by using **reloadacl**
  23. ::
  24. [NOTICE] switch_utils.c:545 Adding 12.34.56.0/32 (allow) [] to list domains