The information below contains various network requirements to make your VoIP Installation Successful. The first section of the document covers general network requirements that apply to most networks when implementing Voice over IP (VoIP). Please review these and any Vendor KBs that might apply to your solution.
VoIP General Network Requirements
The below requirements apply to all VoIP solutions and should be reviewed before proceeding with any implementation of VoIP Services.
Packet Inspection
All traffic to and from these VoIP systems and clients must be allowed and unmodified. Many firewalls have features that inspect, filter, or alter packets. These features must be disabled for VoIP services to function correctly. Especially for SIP, H323, or H225.
- Application-Level Gateway
- ALG
- Application Layer Gateway
- Application Gateway
- Application Proxy
- Firewall Proxy
- Deep Packet Inspection
- Session Helper
Outbound Traffic
Outbound client traffic should match port definitions and be allowed to destination servers. Ensure symmetric RTP support. If not, local firewall/router reconfiguration is required.
Multi-WAN / SD-WAN
Client traffic must originate from a single external IP address. Failover events may require device re-registration.
Vendor KBs
Helpful firewall configuration links:
Sonicwall
Fortinet
Palo Alto
Ubiquiti
Cisco ASA
Crexendo CX WebRTC
Below are the WebRTC requirements for the Crexendo CX Agent Toolbar login:
| Source | Destination IP/DNS Name | Port | Protocol | Direction | Purpose |
|---|---|---|---|---|---|
| Agent LAN | 169.62.81.22 / sbcsjc0403.ozonetel.com | 442 | TCP | Outbound | WebRTC Registration |
| Agent LAN | 169.62.81.22 / sbcsjc0403.ozonetel.com | 40000–60000 | UDP | Outbound | RTP Media |
CrexendoCX Portal Requirements
The below are the sites and IPs used for the Crexendo CX portal.
NEW CX Hub!
| DNS Name | Description |
|---|---|
| https://cxhub.crexendovip.com/login | CX Hub Login Page |
| https://cxagent.crexendovip.com/login | CX Hub Agent Login |
Legacy Portal
| DNS Name | Description |
|---|---|
| https://crexendocx.com/ | Legacy Landing Page |
| https://agent.crexendocx.com/toolbar_widget/index.html#login | Legacy Agent Login |
| https://admin.crexendocx.com/login.jsp | Legacy Admin Portal |
| https://monitor.crexendocx.com/login.jsp | Legacy Dashboard Portal |
| https://reports.crexendocx.com/#/login | Legacy Historical Reporting |
| https://api.crexendocx.com | Legacy API Endpoint |
AWS IP Blocks (Allowlist)
The following AWS IP ranges must be allowed if unable to use DNS Names.