Extension Security

Secure the VoIP extensions.

SIP Registration Port

To prevent malicious registration of SIP extensions, go to Settings > PBX > General > SIP > General to change the UDP Port.

Note: After you change the SIP UDP registration port, you need to change the relevant auto defense rules for the SIP port.

Extension Password

The PBX will generate a random user password for a new extension.

To modify the user password, do as follows:
  1. Go to Settings > PBX > Extensions.
  2. Click beside the desired extension.
  3. Go to Basic > User Information.
  4. In the User Password field, enter the new password.
    Note: The new password should meet the following requirements depending on whether the Allow Weak Password option is enabled (Path: Settings > System > Security > Service).
    Strong password

    (The "Allow Weak Password" option is disabled)

    		 Basic password

    (The "Allow Weak Password" option is enabled)
    • At least 10 characters
    • At least 1 uppercase letter
    • At least 1 lowercase letter
    • At least 1 digit
    • Allowed special characters include only ~, ^, *, -, _, and ?
    • Consecutive numbers are not allowed (e.g., 4567)
    • The extension number and the caller ID are not allowed
    • At least 6 characters
    • At least 1 uppercase letter
    • At least 1 lowercase letter
    • At least 1 digit
    • Allowed special characters include only ~, ^, *, -, _, and ?
  5. Click Save and Apply.

Restrict Extension Registration

You can limit which IP address or which User Agent is allowed to register a certain extension.

Go to Settings > PBX > Extensions to edit the extension's Advanced setting.

  • User Agent Registration Authorization

    By default, the PBX allows phones to register extensions without user agent limit. To enhance the extension security, you can restrict which user agent is allowed to register the extension.

    When a phone is trying to register the extension, the phone will send SIP packets that contain the user agent. If the user agent is not allowed, the registration will fail.

  • IP Restriction

    To enhance the extension security, you can restrict which IP is allowed to register the extension.

SRTP

SRTP is used to encrypt audio streams. If SRTP is enabled for an extension, the extension will support SRTP and will allow negotiation with calls without SRTP.

Go to Settings > PBX > Extensions to edit the extension's Advanced setting.