[Spce-user] How to setup subscriber as SIP Trunk

[Vincent Dubois]

Hi

If you do not want authentication, and just want to validate based on IP address this is what we do:
(PS: in our case everything goes thru an SBC first, so it is just different internal IPs of our SBCs)

In the subscriber:

  *   add a Permanent Registration like
contact: sip:sip at 1.2.3.4:5060  with the IP of the destination
expires: 2157-01-01

In the subscriber preferences

  *   under Trusted Sources you want to add their IP again something like
Source IP: 1.2.3.4
Protocol: ANY
From-Pattern: .*

  *   under Number Manipulation
e164_to_ruri: true     (unless that customer only has one number, in that case you could have put the number in the permanent registration, and this wouldn’t be needed)

  *   under Access Restrictions
allowed_clis: *   (again if they have use multiple numbers, if not then you could put the number there)

I would not recommend this with public IP, because source IP can be faked and any Invite from the IP would be accepted.
But in case of private IP space, or like us private SBC Ips, it works well.

PS: in our case we actually use a different interface, so in the permanent registration we set the socket to that other interface, and in sub pref (under NAT and Media Flow Control) we also set the rtp_interface to that other interface.


Vincent Dubois | Analyste programmeur
B2B2C
514-908-5420
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20241001/d309c4d6/attachment-0001.htm>