Firewall rules

Firewall settings are necessary depending on how your network is set up. In most cases, the network is protected by a NAT from the provider, a router and perhaps even a firewall.



For customers where data traffic from the internal network to the outside is open (e.g. private households etc.), we generally recommend not setting up port forwarding. peoplefone sends data packets back to the registered device every 30 seconds (NAT Keep Alive) so that the ports remain open and incoming calls are guaranteed.



If the data traffic in your network is controlled in both directions, we recommend that you set up firewall settings in accordance with our recommendations.



ATTENTION: For security reasons, only allow communication between your firewall and peoplefone!

peoplefone GmbH

Cody Blaylock

Cody Blaylock

Teamleiter Service

Content Blocks

IP addresses & ports

If your VoIP device does not register or you can only hear the voice in one direction after configuration, your firewall could be blocking the voice packets. Temporarilyswitch offthe firewall and check the voice again. If it then works, you must open the incoming firewall ports as described below.



IP addresses:

"185.190.125.1 - 185.190.125.31"

IP ports:

"UDP/TCP 5060" "UDP/TCP 6000" "TLS 5061" (Signaling)

"UDP 8000-60000" (Voice)



Deactivate "SIP ALG"



Session timeout

Session timeout udp-connect 300 seconds

Session timeout udp-deliver 300 seconds

SIP ALG / NAT Keep Alive / STUN

If you encounter problems after configuration, such as irregular incoming calls, regular interruptions within a call, etc., please check the parameters of your VoIP device, router or firewall.



In general, you need to:



Firewall and / or router: Deactivate SIP ALG

Device: Activate NAT Keep Alive

Gigaset IP: Activate STUN server with stun.peoplefone.com

Push notification

"185.190.125.38" (push server)

"UDP/TCP 4998" (push)

"sipis01.peoplefone.com"

Autoconfiguration / Provisioning

"TCP 80" and "TCP 443"

peoplefone SOFTPHONE

"TCP 80" and "TCP 443"

Server URL

Global: firmware.peoplefone.com

Cisco SPA: ciscospa.peoplefone.com (cert EOL 01-2025)

Gigaset: gigaset.peoplefone.com

Mitel: mitel.peoplefone.com

Panasonic: panasonic.peoplefone.com

Snom: snom.peoplefone.com

Yealink: yealink.peoplefone.com

Firewall rules for peoplefone MEET

peoplefone MEET 91.132.84.160/28



SRTP TCP/32768-65535 and UDP/32768-65535



TURN/STUN

UDP/80

TCP/80

UDP/443

TCP/443

TCP/3478-3479

UDP/3478-3479

LDAP

ldaps://ldaps.peoplefone.com:636

Print2Fax (legacy product)

"TCP 443"

Comments