FourteenIP Failover Gateway
Gateway Configuration, BroadWorks Provisioning, CX-GWSAK Local Calling, and EV Lite User Onboarding
Version 4 | Internal Technical Guide
Purpose: A structured technician reference for configuring supported FourteenIP gateways to use the local CX-GWSAK Failover Box during an Internet or primary SIP outage and return automatically to the FourteenIP service when connectivity is restored.
Guide Map
Select a section below to jump directly to the required task.
|
Section |
Technician task |
Primary interface |
|---|---|---|
|
Confirm compatibility and collect site values |
Deployment worksheet |
|
|
Configure gateway failover and BroadWorks tags |
FourteenIP gateway / BroadWorks |
|
|
Authorize the gateway network |
CX-GWSAK Outbound call routing |
|
|
Configure registrar options and local user records |
CX-GWSAK Extension > IP |
|
|
Add EV Lite users with the Excel template |
CX-GWSAK Quick Addition |
|
|
Test failover and automatic return |
Gateway logs / test calls |
|
|
Troubleshoot and complete handoff |
Operational checklist |
Presentation rule: Values inside braces are site-specific placeholders. Preserve capitalization, separators, percent signs, port numbers, and spacing when copying configuration values. Screenshots contain lab examples and must not be copied unchanged into production.
01 Solution Overview and Compatibility
1.1 Supported Devices
Use this procedure only with the currently onboarded devices below. Firmware approval and site-specific configuration remain separate deployment requirements.
|
Device category |
Supported devices |
|---|---|
|
New FourteenIP gateways |
FourteenIP-24GW / FourteenIP-24Lite; FourteenIP-50GW / FourteenIP-50Lite; FourteenIP-96GW / FourteenIP-96Lite |
|
IP phones |
Yealink IP Phones |
IMPORTANT — COMPATIBILITY RESTRICTION: ANY DEVICE NOT INCLUDED IN THIS COMPATIBILITY LIST HAS NOT YET BEEN ONBOARDED OR VALIDATED FOR USE WITH THE CX-GWSAK FAILOVER BOX AND MUST NOT BE USED WITH IT UNLESS IT IS SUBSEQUENTLY ADDED TO THIS LIST.
1.2 How Failover Works
During an Internet or primary SIP outage, the FourteenIP gateway changes its SIP signaling target to the local CX-GWSAK. This keeps configured on-site extension-to-extension calling available. When the primary FourteenIP SIP service is reachable and stable again, the gateway returns automatically.
|
State |
Signaling target |
Expected behavior |
|---|---|---|
|
Normal |
FourteenIP primary SIP server |
All approved primary calling services operate normally. |
|
WAN outage |
Local CX-GWSAK at |
Configured on-site users retain local extension-to-extension calling. |
|
Service restored |
FourteenIP primary SIP server |
The gateway returns after the configured 60-second fallback interval. |
What This Guide Covers
-
Local extension-to-extension calling while the WAN or primary SIP service is unavailable.
-
BroadWorks tags named to match the High Availability settings in the gateway GUI.
-
Standard per-user deployments and the EV Lite single-pilot registration model.
-
Automatic return to the primary FourteenIP SIP service after connectivity is restored.
This configuration does not provide PSTN or off-site calling during an outage unless the site has a separately configured local carrier, FXO, PRI, or equivalent path.
1.3 Prerequisites
-
Install the currently approved firmware for the FourteenIP gateway and CX-GWSAK.
-
Assign static LAN addresses to the gateway and failover box and verify two-way IP reachability.
-
Permit the approved local SIP port between the gateway and CX-GWSAK. Examples in this guide use UDP 5060.
-
Collect the site Group ID, user identity format, extension list, gateway IP, site network, subnet mask, and regional SIP server ID.
-
Confirm that the failover box has sufficient capacity. The supplied configuration supports up to 200 IP extension records per box.
-
Export or record the current gateway and CX-GWSAK configurations before making changes.
1.4 Site Values to Collect
|
Required value |
Site value |
|---|---|
|
Primary registrar/proxy |
|
|
Primary SIP server ID |
|
|
CX-GWSAK address |
|
|
FourteenIP gateway address |
|
|
Site network and mask |
|
|
Site Group ID |
|
|
Deployment type |
Standard per-user registration / EV Lite single registration |
02 Configure the FourteenIP Gateway
2.1 Primary/Standby SIP Settings
-
Sign in to the FourteenIP gateway and navigate to Basic > SIP. Preserve the existing primary registrar, proxy, credentials, and server profile.
-
Set Mode to Primary-Standby.
-
Select Primary and backup servers.
-
Enter
{FAILOVER_IP}:5060as the Backup SIP proxy. -
Enable Primary server heartbeat detection.
-
Set OPTIONS request period to
60seconds. -
Enable Primary server priority.
-
Select Save, reopen the page, and confirm that every setting remains applied.
Figure 2-1. Basic > SIP: tested primary/standby settings with the CX-GWSAK local backup address.
SITE-SPECIFIC VALUE: The screenshot uses
192.168.50.26:5060as a lab example. Replace it with the actual CX-GWSAK LAN address for the site.
2.2 Final Gateway Parameter State
The diagnostic change log contains temporary 0-second and 30-second edits. Those entries show the UI being changed and are not the final configuration.
|
Parameter |
Final value |
Use |
|---|---|---|
|
|
|
Backup SIP proxy |
|
|
|
OPTIONS request period used for primary-to-backup detection |
|
|
|
OPTIONS request period used for backup-to-primary return |
|
|
|
Primary server priority; checked = 1 |
|
|
|
OPTIONS policy: Primary and backup servers |
|
|
|
Primary SIP server profile used by the OPTIONS policy |
US lab example:
IP_FAIL_FALLBACK_METHOD = 1 BACKUP_CA_1 = 192.168.50.26:5060 P2P_FLAG = on P2P_SIP_SERVER_ID = us-sbc-secure IP_FAILOVER_TIME = 60 IP_FAIL_FALLBACK_TIME = 60
DO NOT COPY TRANSITIONAL VALUES: Ignore earlier log entries showing
IP_FAIL_FALLBACK_METHOD = 0,IP_FAIL_FALLBACK_TIME = 0, or 30-second timers. The final target is method1with both timers set to60seconds.
2.3 Configuring GWs for Failover
Use the following tags in the FourteenIP gateway device template. The tag names intentionally match the labels technicians see under Basic > SIP.
FAILOVER AND FAILBACK: When Internet access or the primary SIP path is unavailable, the gateway fails over to the local CX-GWSAK Failover Box. When primary service becomes reachable and stable again, Primary server priority causes the gateway to fail back automatically to the normal FourteenIP SIP server.
|
Gateway GUI setting |
BroadWorks tag |
Value / scope |
Gateway parameter |
|---|---|---|---|
|
Backup SIP proxy |
|
|
|
|
OPTIONS request period |
|
|
|
|
Primary server priority |
|
|
|
|
OPTIONS: Primary and backup servers |
|
|
|
|
Primary SIP server profile |
|
|
|
Paste-ready device-template substitutions:
BACKUP_CA_1 = %BACKUP-SIP-PROXY% IP_FAILOVER_TIME = %OPTIONS-REQUEST-PERIOD% IP_FAIL_FALLBACK_TIME = %OPTIONS-REQUEST-PERIOD% IP_FAIL_FALLBACK_METHOD = %PRIMARY-SERVER-PRIORITY% P2P_FLAG = %OPTIONS-PRIMARY-AND-BACKUP-SERVERS% P2P_SIP_SERVER_ID = %OPTIONS-PRIMARY-SERVER-ID%
Assign Backup SIP proxy at the site or device level and assign the primary server ID for the correct region. Keep OPTIONS request period at 60, Primary server priority at 1, and Primary and backup servers set to on. The deployment profile must also retain Mode = Primary-Standby and Primary server heartbeat detection = enabled.
03 Configure CX-GWSAK Outbound Routing
-
Sign in to the CX-GWSAK and open Outbound call routing.
-
Retain the site-approved Cloud PBX, transport, call restriction, and emergency-call values.
-
Select Allow call from IP segment(s).
-
Enter the site network under IP segment 1 and enter the correct subnet mask explicitly.
-
Add a second approved segment only when the deployment requires it.
-
Set the local signaling port to the approved site value. The supplied configuration uses
5060. -
Save the page and confirm that the fields remain applied.
Figure 3-1. CX-GWSAK Outbound call routing: authorize the gateway’s site network.
SECURITY NOTE: Do not leave the subnet mask blank when that would trust a broader network than intended. Enter the actual site mask and never copy the lab Cloud PBX or UA domain name into another deployment.
04 Configure Registrar Options and Local Users
4.1 Extension > IP Records
Open Extension > IP. Every identity that must receive or place a local failover call needs a matching IP extension record on the CX-GWSAK. The trusted IP must point to the FourteenIP gateway address and port used for local signaling.
Figure 4-1. Extension > IP: example local user records routed to the FourteenIP gateway.
CAPACITY: The supplied design supports up to 200 IP extension records per CX-GWSAK. Confirm the remaining capacity before adding a new site or user batch.
4.2 Registrar OPTIONS
From Extension > IP, select Registrar OPTIONS. Use the site Group ID as the Group name; the supplied example uses TGDMS.
Figure 4-2. Registrar OPTIONS: example local registrar and Group name settings.
|
Field |
Example |
Instruction |
|---|---|---|
|
SIP listening port |
User defined: |
Match the approved local signaling port. |
|
Min. registration expiration |
|
Use the approved local registrar value. |
|
NAT min. registration expiration |
|
Use the approved NAT value. |
|
Realm |
|
Use the configured local registrar realm. |
|
Failed authentication response |
Send |
Keep the tested response behavior. |
|
OPTIONS target / interval |
Any registered IP Ext. / |
Send OPTIONS to local IP extensions every 60 seconds. |
|
TLS |
Cleared in local UDP example |
Enable only when the approved local design explicitly uses TLS. |
|
Group name |
|
Enter the exact site Group ID. |
05 EV Lite Bulk User Onboarding
EV LITE REGISTRATION MODEL: EV Lite uses one SIP registration for the pilot user. Seeing only the pilot registration is correct and expected.
Every EV Lite user must still be added under Extension > IP on the CX-GWSAK. These entries give the failover box the local identities it needs to route calls between EV Lite users; they do not create separate SIP registrations.
Key Notes
-
One pilot registration represents the EV Lite service.
-
Add every EV Lite user as an individual local routing record.
-
Use the FourteenIP gateway’s local IP address and SIP port as the trusted IP for each record.
-
During testing, place calls in both directions between two users from the imported list.
5.1 Excel Template Supplied by the Gateway
The Quick Addition window includes an Excel template button. Selecting it downloads a blank .xlsx workbook with the required column headings. Complete one row for each EV Lite user, then copy only the data rows back into Quick Addition. Do not copy the header row.
Excel Template Example
Use the Excel template button in the gateway’s Quick Addition window to download the blank workbook. The populated example below shows how the technician should complete it. Replace the sample identities, credential, call restriction, and gateway address with the approved values from the current site worksheet.
Example of the EV Lite bulk user template completed for technician reference.
Copy-Ready Excel Sample
Copy the tab-separated rows below and paste them directly into cell A2 of the Excel template. Excel will place the data into columns A through F. The blank PIN and Display as columns are intentionally preserved. Do not paste these rows over the workbook’s header row.
TGDMS4080 {SITE-APPROVED-PASSWORD} International 192.168.50.105:5060
TGDMS4081 {SITE-APPROVED-PASSWORD} International 192.168.50.105:5060
TGDMS4082 {SITE-APPROVED-PASSWORD} International 192.168.50.105:5060
TGDMS4083 {SITE-APPROVED-PASSWORD} International 192.168.50.105:5060
TGDMS4084 {SITE-APPROVED-PASSWORD} International 192.168.50.105:5060
REPLACE THE SAMPLE VALUES: Before importing, change the Group ID/extension, password, call restriction, and trusted gateway IP address for the site.
|
Excel template column |
Sample technician entry |
What to enter |
|---|---|---|
|
A — Extension number ( |
|
Site Group ID followed by the user’s extension. |
|
B — Password ( |
|
Approved deployment password. Never reuse the screenshot password. |
|
C — PIN ( |
Leave empty |
Enter nothing unless the approved site build requires a PIN. |
|
D — Display as ( |
Leave empty |
Enter nothing unless the deployment requires a display value. |
|
E — Call restriction ( |
|
Call-restriction policy approved for the site. |
|
F — IP address for IP trusted authentication ( |
|
Local IP address and SIP port of the serving FourteenIP gateway. |
The identities and IP address shown above are examples. Production values must come from the current site worksheet.
5.2 Import Users with Quick Addition
-
On the CX-GWSAK, navigate to Extension > IP and select Quick Addition.
-
Set Starting line to the first unused record. Do not overwrite existing users.
Figure 5-1. Start the EV Lite bulk build from Extension > IP > Quick Addition.
-
Select Excel template. The gateway downloads an
.xlsxspreadsheet. -
Open the workbook in Microsoft Excel and enter one user per row.
-
Preserve the six-column order: Extension number, Password, PIN, Display as, Call restriction, and IP address for IP trusted authentication.
Figure 5-2. EV Lite Excel template. The displayed identities, password, policy, and IP address are examples only.
CREDENTIAL HANDLING: Replace the example password with the approved deployment value. Do not reuse the screenshot password at another site.
-
Copy only the completed data rows from Excel and paste them into the Quick Addition text area.
-
Exclude the header row and preserve blank PIN and Display as cells so the tab-delimited columns remain aligned.
Figure 5-3. Paste the Excel data rows into Quick Addition, excluding the title row.
EXAMPLE RANGES: The supplied screenshots show different lab batches. Compare the pasted identities with the current site worksheet before selecting Preview.
-
Select Preview.
-
Verify the Number, password source, blank optional fields, Call restriction, trusted gateway IP, starting line, and total record count before applying the batch.
Figure 5-4. Quick Addition preview: validate every parsed column before applying the batch.
-
Select Apply, then Close.
-
On Extension > IP, confirm the new records, select Save, and reopen the page to verify that the records remain present and enabled.
EV LITE VERIFICATION: The expected EV Lite registration state is one pilot registration. Confirm that all EV Lite user identities are present as local routing records, then place calls between two EV Lite users in both directions during the outage test.
06 Failover and Automatic Return Validation
6.1 Pre-Test Checks
-
Confirm that the primary SIP registration is stable and save a baseline screenshot or log.
-
Confirm that the CX-GWSAK backup address is reachable from the FourteenIP gateway over the approved local SIP port.
-
Confirm that every test user has an enabled Extension > IP record and the Group name matches the site Group ID.
-
For EV Lite, select two users and confirm that both appear in the local routing records.
-
Begin logging before changing network state so the complete transition is captured.
6.2 Controlled Outage Test
-
Place a local user-to-user call and an approved external call while the primary SIP service is available.
-
Remove only upstream Internet access. Keep both devices powered and keep the site LAN intact.
-
Do not unplug the local link between the FourteenIP gateway and CX-GWSAK.
-
Allow the 60-second failover interval and confirm that signaling changes to the CX-GWSAK.
-
Place calls in both directions between at least two configured users. For EV Lite, use two users from the imported local routing records.
-
Restore upstream Internet access.
-
Wait until the primary registrar/proxy is reachable and allow the configured 60-second fallback interval.
-
Verify that the gateway returns to the primary SIP service without a reboot and repeat the baseline calls.
-
Export the relevant logs and record caller/callee pairs, transition times, expected results, and actual results.
6.3 Acceptance Criteria
|
Checkpoint |
Expected signaling state |
Pass condition |
|---|---|---|
|
Normal |
Primary active; CX-GWSAK standby |
Baseline calls operate and primary registration is stable. |
|
After outage + 60 sec |
CX-GWSAK local backup active |
Configured local calls complete in both directions. |
|
EV Lite outage test |
One pilot registration with local user records |
Two selected EV Lite users can call each other in both directions. |
|
After restore + 60 sec |
Primary active again |
Gateway returns automatically without reboot and calls repeat successfully. |
07 Troubleshooting and Handoff
7.1 Troubleshooting Matrix
|
Symptom |
Checks |
|---|---|
|
Gateway never moves to CX-GWSAK |
Verify |
|
Gateway remains on backup after service returns |
Verify Primary server priority, |
|
EV Lite local user list is incomplete |
Compare the imported IP extension records with the site worksheet. Confirm every identity uses the correct Group ID format and that the trusted IP points to the serving gateway. |
|
Bulk columns are shifted |
The header row may have been copied, or blank PIN/Display cells were not preserved. Return to Excel and copy only the data rows with all six columns. |
|
Existing users were replaced |
The Starting line was not the first free record. Restore the saved configuration and repeat the import at the correct line. |
|
403 or authentication failure |
Verify realm, Group name, approved credential, trusted gateway IP, supplemental IP segment, and subnet mask. |
|
One-way or wrong-destination local calls |
Compare the called identity with the Extension > IP Number field and confirm the correct gateway IP/port for every affected record. |
7.2 Technician Handoff Checklist
-
Site-value worksheet completed and stored with the deployment record.
-
Primary and backup SIP settings saved and verified after reopening the page.
-
Final 60-second failover and fallback values confirmed in configuration or logs.
-
CX-GWSAK site network and explicit subnet mask confirmed.
-
Registrar Group name and all standard/EV Lite extension records confirmed.
-
Normal, outage, EV Lite user-pair, and restoration tests completed in both directions.
-
Caller/callee pairs, expected behavior, actual behavior, screenshots, and logs attached to the handoff.
-
Current gateway and CX-GWSAK configuration backups retained.
COMPLETION STANDARD: Do not mark the site failover-ready until the gateway returns to the primary SIP service automatically and the selected EV Lite user pair passes in both directions.