Networks

By default, your endpoints (phones and SIP trunks) can connect and authenticate (also called registering or peering) from any network. The Trusted Networks feature uses IP Network Authentication to ensure registration can only occur through networks that you specify.

There are many benefits to Trusted Networks:

• The added layer of security
• Ability to bundle security features
• Reduce fraud

Creating a New Network

1. Click Settings in the main menu then click Networks in the left side menu.

2. Click New Network.

• Enter a name and relevant description for the network.
• Make sure the Enabled box is checked.

IP Addresses / Ranges

1. Enter the IP address of each router/edge device/firewall that should be used for VoIP peering.
   • Only Static Public IP Addresses can be used.
   • Only one address or address range is allowed per line.
   • For multiple addresses: press enter after each address to start a new line.
   • Use slash notation to enter address ranges (e.g., 127.0.0.1/5).
2. To add the IP address of the network that your computer is currently connected to, click Add Current IP.
   • Make sure you are on the same network as the VoIP endpoints.
   • This is a convenient alternative to manually looking up and entering your network’s public IP address.

Endpoints

You can select the endpoints that will use the Trusted Network. Click on names in the Available Endpoints box on the left, and click Add to move the endpoints to the box on the right.

This can also be done in Network Assignments or in the Extension Details screens.

An Endpoint can only be assigned five IP addresses among all networks, regardless of how many Trusted Networks you have created.

• When you add an Endpoint to a Network, the Endpoint automatically “inherits” all of the Network’s IP addresses.
• For example, the Home Office Network is configured with three IP addresses.  If you add Ext 301, Ed Masters to the Home Office, his Endpoint will automatically be assigned three IP addresses.
• The number of IP addresses associated with each endpoint appears in parentheses. For example, Ext. 201 Ed Masters (3).
• Endpoints with more than five IP addresses will be highlighted in red.
• Either remove that Endpoint from the Network; or remove an address from the Network’s IP Addresses/Ranges list.

Remote Users

Users who take home desk phones or softphones.

Example: Ed has a softphone set up on his laptop. He works from the office three days/week and from home the other days.  Ed uses his softphone for all business calls, when working from home or the office.

If you are using Trusted Networks, Ed’s extension (softphone) must be able to connect (register) from both the office and home networks.

Configuration Options – Depending on your business practices, either of the configurations below will accommodate Ed’s needs:

• You can create a separate Trusted Network called Ed’s Home Network. Then assign Ed’s endpoint to two Trusted Networks: the Office network and Ed’s Home Network.
• Alternatively, you can add the public IP Address for Ed’s home network to the Office Trusted Network. However, this will also increase the number of IP addresses for all other devices currently assigned to the Office network.

Note: If Ed’s softphone does not use Trusted Networks, he can register from anywhere, but this is less secure.

Mobile App Users

Trusted Networks should be bypassed for Mobile App users on the Extension Details screen > Routing and Configuration section > Networks tab.

Trusted Network Bypass is different than disabling Trusted Networks for the Extension. Potential security issues are mitigated by the Mobile App authentication process.

1. When all selections are complete, click Save.
2. Check the Network Assignments screen to confirm the Endpoints are now using the correct Network.

Alert! If any Endpoints were previously configured for “Connect from any Network,” that setting must be manually removed.

Editing An Existing Network

1. From the Networks screen, click the Network in the Name column.
2. Edit settings as needed per instructions in Creating A New Network (above).

Disabling Trusted Networks

You can disable Trusted Networks at either the Network level (per below) or at the Endpoint level.

1. To disable at the Network Level deselect the Enable checkbox and click Save.
2. After disabling the Network, verify that Endpoints on the disabled Network have another way to register.