14IP-T1GW - 14IP

14IP-T1GW

FourteenIP T1 Gateway Configuration Guide

The FourteenIP T1GW bridges SIP services with T1-based carrier and PBX equipment. This guide shows how to generate and import the BroadWorks configuration, followed by complete setup procedures in this order:

  1. Default SIP or Reverse SIP

  2. EV Connect

  3. EV Connect Pro

The EV Connect and EV Connect Pro routing tables are included as editable text inside their respective setup sections. Additional tag references, routing syntax, TLS settings, failover behavior, and acceptance tests follow the deployment procedures.

Scope: BroadWorks generates the site configuration, but the technician downloads and imports it manually. This is not zero-touch autoprovisioning.

1. Hardware and factory access

Product overview

The FourteenIP T1GW is a carrier-grade SIP-to-T1 gateway used to connect BroadWorks or EVA SIP services to traditional T1 carrier and PBX equipment. It provides hardware DSP processing, T1 signaling, SIP trunking, call routing, digit manipulation, fax relay, and SIP failover functions in a 1U platform.

Hardware specifications

Specification

Details

Device type

SIP-to-T1 gateway

Form factor

1U rack mount

Dimensions

44 x 440 x 300 mm

Weight

Approximately 3 kg

Supported configuration

One or two T1 trunks

T1 capacity

Up to 24 channels per enabled T1 interface

T1 usage

One trunk for Default SIP, Reverse SIP, or EV Connect; two trunks for EV Connect Pro

Network interfaces

Four 10/100/1000 Mbps RJ45 ports

External network ports

ETH1 and ETH2

Local management ports

AUX1 and AUX2

Console port

RJ45 RS-232 console

Console speed

115200 baud

Console format

8 data bits, no parity, 1 stop bit

Management protocol

HTTPS

Signaling support

PRI, CAS, Feature Group D, and E&M

SIP support

SIP trunking

DSP processing

Hardware DSP voice processing

Codec support

G.711 mu-law, G.711 A-law, and G.729A

Fax support

T.38 fax relay

Power input

100-240 VAC, 50/60 Hz

Maximum power consumption

18 W

Operating temperature

0-40 C

Mounting

Standard 19-inch rack

Command-line management

SSH

The gateway GUI can expose both T1 and E1 choices. All deployment procedures in this guide use T1, mu-law, ESF, and B8ZS unless a documented site requirement states otherwise.

Physical installation and cabling

  1. Mount the gateway in a grounded 19-inch rack with adequate airflow.

  2. Connect protected AC power within the supported input range.

  3. Connect the management Ethernet interface to the provisioning network.

  4. For Default SIP, Reverse SIP, or EV Connect, connect the site’s single T1 circuit to Trunk 1.

  5. For EV Connect Pro, connect the carrier/Vega circuit to Trunk 1 / ISDN 1 and the PBX circuit to Trunk 2 / ISDN 2. Label both cables before configuration so the ports are not reversed.

  6. Do not assume that physical link indicates correct clocking or switch-side configuration. Confirm the DS1 link, D channel, and bearer channels after the software configuration is complete.

Factory network and credentials

Setting

Factory value

Factory IP address

192.168.2.240

Factory subnet mask

255.255.255.0

Factory gateway

192.168.2.1

Factory hostname

DGW100

Factory web password

(contact support)

Post-import administrator password

(contact support)

Connect a workstation to the factory subnet and browse to:

https://192.168.2.240

The factory certificate can cause a browser warning. Continue only after confirming that the address belongs to the gateway being configured.

Factory SSH access

SSH is enabled by default on port 22. Connect with:

ssh (contact support for user)@<gateway-IP-address>

Use the factory SSH credentials:

Credential

Factory value

Username

(contact support)

Password

(contact support)

For administrator access, enter (contact support) and use the factory administrator password (contact support) when prompted. Change or secure factory credentials according to the approved deployment procedure after installation.

2. BroadWorks configuration and file download

Create the BroadWorks assignment

  1. Create the required trunk and pilot user in BroadWorks.

  2. Select FourteenIP_T1GW as the Identity/Device Profile Type.

  3. Confirm the trunk-group identity, pilot authentication user, password, SIP domain, and Calling Line ID values.

  4. Open the assigned Identity/Device Profile.

  5. Select Custom Tags.

  6. Enter the site network, country-tone, and time-zone values described in Section 8.

  7. Save the profile.

BroadWorks displays tag names without surrounding percent signs. In the template, the same value appears as %TAG_NAME%.

image-20261009-004539.png

Rebuild and select the deployment file

  1. Open the Identity/Device Profile Files tab.

  2. Click Rebuild the files when the profile or tag values have changed.

  3. Wait for the rebuild to complete.

  4. Locate the file for the required deployment.

  5. Download the Repository File, not the Template File.

Deployment

File row to select

Default SIP or Reverse SIP

Filename containing Upgrade_Default_SIP.ini

EV Connect

Filename containing Upgrade_Default_EVC.ini

EV Connect Pro

Filename containing Default_EVA_Connect_Pro

Use the complete generated filename shown by BroadWorks. Every gateway import file must be an .ini file.

Screenshot note: Some beta screenshots show the former Redstone profile name or an earlier device-type label. Production profiles display FourteenIP_T1GW; the Files-tab workflow and deployment file labels remain the same.

image-20261009-004727.png

3. Import the BroadWorks file

  1. Sign in to the gateway at its current management address.

  2. Navigate to Tools > Configuration Maintenance.

  3. Under Import data, click Choose File.

  4. Select the downloaded BroadWorks Repository File.

  5. Click Import.

  6. When the confirmation page appears, click Next.

  7. Confirm that the upload completes successfully.

  8. Do not interrupt power or network connectivity during the import.

  9. Reboot when prompted.

  10. Reconnect using the imported static IP address and post-import administrator password.

image-20261009-004747.pngimage-20261009-004808.png

4. Deployment profiles

Deployment

SIP registrar mode

T1 interfaces

Timing source

Trunk 1 switch side

Trunk 2 switch side

Default SIP

Per SIP trunk

1

Local

Network

Disabled

Reverse SIP

Per SIP trunk

1

TDM 1

User

Disabled

EV Connect

Per gateway

1

Local

Network

Disabled

EV Connect Pro

Per gateway

2

TDM 1

User – carrier side

Network – PBX side

5. Default SIP and Reverse SIP setup

Default SIP and Reverse SIP use Per SIP trunk registration. Reverse SIP follows the same process with TDM 1 timing and the Trunk 1 switch side set to User.

Step 1 – Configure SIP registration

  1. Navigate to Basic > SIP.

  2. Enter the assigned Registrar server, Proxy server, SIP domain, and signaling port.

  3. Set SIP Registrar mode to Per SIP trunk.

  4. Click Save.

  5. Open Basic > SIP Repeater, which becomes available after Per SIP trunk mode is saved.

  6. Enter the trunk registration username, authentication name, password, and registration expiration.

The screenshot identifies the Basic SIP fields. Use the assigned BroadWorks values and select Per SIP trunk for Default SIP and Reverse SIP.

image-20261009-004820.png

Step 2 – Configure the DS1 interface

Navigate to Basic > DS1 configuration.

Setting

Default SIP

Reverse SIP

DS1 type

T1

T1

PCM codec

mu-law

mu-law

Timing source

Local

TDM 1

Gain to IP

0 dB

0 dB

Framing

ESF

ESF

Line code

B8ZS

B8ZS

Line length

Short haul/110 ft

Short haul/110 ft

Signaling type

ISDN, unless the site requires CAS

ISDN, unless the site requires CAS

Disable the unused second T1 interface.

image-20261009-004842.png

Step 3 – Configure Trunk 1 and P-Preferred-Identity

Navigate to Trunk > Trunk 1.

Setting

Default SIP

Reverse SIP

Enable

Enabled

Enabled

D channel

Timeslot 24

Timeslot 24

Switch side

Network

User

Signaling Standard

NI-2

NI-2

Circuit hunting

Forward

Forward

ISDN-B channels

Channels 1 through 23

Channels 1 through 23

Enter P-Preferred-Identity in this exact format:

<sip:TRUNK-IDENTITY@SIP-DOMAIN>

Example:

<sip:3213061506@dmstg.ev.com>

image-20261009-004926.png

Step 4 – Configure Advanced SIP for PPI

Navigate to Advanced > SIP.

Setting

Required value

IMS

Enabled

PAI or PPI

PPI

Username add domain

Unchecked

Re-register on INVITE failure

Enabled

Do not validate Via

Enabled for the tested profile

image-20261009-004946.png

Step 5 – Configure site routing and test

Open Routing > Routing table and apply the routing table approved for the Default SIP or Reverse SIP site. Save the table, then verify registration, T1 link state, inbound calling, outbound calling, caller ID, DTMF, audio, and disconnect behavior.

6. EV Connect setup

EV Connect uses one T1 interface for the PBX and Per gateway EVA registration.

Step 1 – Configure EVA registration

  1. Navigate to Basic > SIP.

  2. Enter the EVA Registrar server, Proxy server, subdomain, username, authentication name, password, and registration expiration.

  3. Set SIP Registrar mode to Per gateway.

  4. Configure TLS, SRTP, DNS SRV, and NAPTR as described in Section 10.

  5. Click Save.

image-20261009-005012.png

Step 2 – Configure DS1, Trunk 1, and PPI

  1. Under Basic > DS1 configuration, use T1, mu-law, Local timing, ESF, B8ZS, Short haul/110 ft, and ISDN unless the site requires CAS.

  2. Disable the unused second T1 interface.

  3. Under Trunk > Trunk 1, set the switch side to Network.

  4. Use Timeslot 24, NI-2, Forward hunting, and B channels 1 through 23.

  5. Enter the EVA P-Preferred-Identity on Trunk 1 in the form <sip:EVA-USER@EVA-DOMAIN>.

Step 3 – Configure Advanced SIP

Navigate to Advanced > SIP and enable IMS, select PPI, leave Username add domain unchecked, enable Re-register on INVITE failure, and apply the tested Via-validation setting.

Step 4 – Enter the EV Connect routing table

Replace the site-specific examples before saving:

Example value

Meaning

933

Approved emergency number (Emergency Numbers will vary depending on Site)

3213061530

Emergency caller ID ( Change accordingly with the emergency CLID you wish to put for your site)

141414 / 141415

EVA access numbers

EVAJUPITER

BroadWorks Group ID ( Dymanic tags will change GROUP ID for specified site)

10 in REMOVE 10

Character count of the Group ID ( Allows for the extension to be read by the pbx when no alternate trunk identity is present)

3213061541

Standard outbound caller ID ( Change accordingly for your site)

7368

PBX front-desk/fallback extension ( Number will vary depending on the extension of front Desk for site that this will fall over to if EVA cannot be reached)

Navigate to Routing > Routing table and paste these editable rules:

ISDN[1] 933 REPLACE CPN-4/3213061530
ISDN[1] 933 END
ISDN[1] 141414 REPLACE CPN0/EVAJUPITER
ISDN[1] 141414 END
ISDN[1] 141415 REPLACE CPN0/EVAJUPITER
ISDN[1] 141415 END
ISDN[1] CPNXXXXXXX END
ISDN[1] CPNX REPLACE 3213061541
ISDN[1] X END
IP CPNEVAJUPITERX REMOVE 10
IP[127.0.0.1] 141414 REPLACE 7368
IP[127.0.0.1] 141414 ROUTE ISDN 1
IP[127.0.0.1] 141415 REPLACE 7368
IP[127.0.0.1] 141415 ROUTE ISDN 1
IP EVAJUPITERX REMOVE 10
IP X ROUTE ISDN 1

The table is editable text. Technicians can copy it, replace site values, or remove rules that are not approved for the deployment.

Step 5 – Validate EV Connect

  • PBX calls to 141414 and 141415 reach EVA.

  • EVA transfers reach PBX extensions with and without Alternate Trunk ID.

  • Seven-or-more-digit caller IDs remain unchanged.

  • Short extension caller IDs use the site outbound caller ID.

  • 933 reads back the expected emergency caller ID and registered address.

  • When EVA is unreachable and the gateway returns the failed call locally, both EVA numbers reach the PBX fallback extension.

  • When EVA connectivity returns, calls return to the normal EVA path.

7. EV Connect Pro setup

EV Connect Pro physically separates the carrier and PBX paths:

Carrier/Vega <-> Trunk 1 / ISDN 1 <-> FourteenIP T1GW <-> Trunk 2 / ISDN 2 <-> PBX
                                                    |
                                                    +---- SIP/TLS ---- EVA

Trunk 1 faces the carrier and operates as User. Trunk 2 faces the PBX and operates as Network.

Step 1 – Configure EVA registration

  1. Navigate to Basic > SIP.

  2. Enter the EVA Registrar server, Proxy server, subdomain, registration username, authentication name, password, and registration expiration.

  3. Select Per gateway.

  4. Apply the TLS settings in Section 10.

  5. Click Save.

Step 2 – Configure both DS1 interfaces

Navigate to Basic > DS1 configuration.

Setting

Required value

DS1 type

T1

PCM codec

mu-law

Timing source

TDM 1

Gain to IP

0 dB

Framing

ESF on both interfaces

Line code

B8ZS on both interfaces

Line length

Short haul/110 ft on both interfaces

Signaling type

ISDN on both interfaces

image-20261009-005042.png

Step 3 – Configure Trunk 1 for the carrier

Navigate to Trunk > Trunk 1 and configure:

Setting

Value

Enable

Enabled

Name

Carrier or site-approved name

P-Preferred-Identity

<sip:EVA-USER@EVA-DOMAIN>

D channel

Timeslot 24

Switch side

User

Signaling Standard

NI-2

Circuit hunting

Forward

ISDN-B channels

Channels 1 through 23

image-20261009-005102.png

Step 4 – Configure Trunk 2 for the PBX

Navigate to Trunk > Trunk 2 and configure:

Setting

Value

Enable

Enabled

Name

PBX or site-approved name

P-Preferred-Identity

Same <sip:EVA-USER@EVA-DOMAIN> used on Trunk 1

D channel

Timeslot 24

Switch side

Network

Signaling Standard

NI-2

Circuit hunting

Forward

ISDN-B channels

Channels 1 through 23

image-20261009-005128.png

Step 5 – Configure Advanced SIP for PPI

Navigate to Advanced > SIP and configure:

Setting

Required value

IMS

Enabled
[IMPORTANT NOTE: After enabling IMS, make sure “Username: Add Domain” is unchecked and that the remaining settings are configured exactly as shown below.]

PAI or PPI

PPI

Username add domain

Unchecked

Re-register on INVITE failure

Enabled

Do not validate Via

Enabled for the tested profile

These settings allow the P-Preferred-Identity configured on both trunks to be used when calls move among the carrier, PBX, and EVA paths.

image-20261009-005155.png

Step 6 – Enter the EV Connect Pro routing table

Replace the site-specific examples before saving:

Example value

Meaning

1530

Mainlines last 4 digits ( Most PBXs only recieve 4 digits

141414 / 141415

EVA External and Internal access numbers

EVAJUPITER

BroadWorks Group ID (Dynamically assigned via tags)

10 in REMOVE 10

Character count of the Group ID ( meant only to allow Extension to be read in event that Alternate Trunk ID is not used)

3213061535

Standard outbound caller ID for short extensions ( CLID manipulation allows you to manipulate caller ID anyway you choose but it must be a valid number

7368

PBX front-desk/fallback extension if EVA cannot be reached

933

Approved emergency number (Emergency Number will vary depending on site)

Navigate to Routing > Routing table and change whatever your mainline, emergency number, CLID and fallback number will be for your specified site(Group IDs will already be assigned dynamically via Broadworks):

ISDN[1] 1530 REPLACE 141414
ISDN[1] 1530 END
ISDN[1] CPNX ADD 00
ISDN[1] X ROUTE IP 127.0.0.1:5060
ISDN[2] 141414 REPLACE CPN0/EVAJUPITER
ISDN[2] 141414 END
ISDN[2] 141415 REPLACE CPN0/EVAJUPITER
ISDN[2] 141415 END
ISDN[2] XXXXXXX ROUTE IP 127.0.0.1:5060
ISDN[2] XXXX END
ISDN[2] XXX ROUTE IP 127.0.0.1:5060
IP[127.0.0.1] CPN00 REMOVE 2
IP[127.0.0.1] CPN00 ROUTE ISDN 2
IP[127.0.0.1] 141414 REPLACE 7368
IP[127.0.0.1] 141414 ROUTE ISDN 2
IP[127.0.0.1] 141415 REPLACE 7368
IP[127.0.0.1] 141415 ROUTE ISDN 2
IP EVAJUPITERX REMOVE 10
IP EVAJUPITERX ROUTE ISDN 2
IP[127.0.0.1] CPNXXXXXXX ROUTE ISDN 1
IP[127.0.0.1] CPNX REPLACE 3213061535
IP[127.0.0.1] 933 ROUTE ISDN 1
IP[127.0.0.1] XXXXXXX ROUTE ISDN 1
IP[127.0.0.1] XXX ROUTE ISDN 1
IP XXXXXXX ROUTE ISDN 1
IP[127.0.0.1] XXXX ROUTE ISDN 2
IP X ROUTE ISDN 2

The table is an example of what it will look like when you see it in the Gateway. The table will already be inserted once you import the config, and you can change accordingly with your sites specified numbers.

8. Additional BroadWorks tags

These site values can be selected before the file is rebuilt and exported. The matching GUI location is included for verification or correction after import.

Network settings

The gateway ships at 192.168.2.240. Standard testing and production deployments use a static address.

BroadWorks tag

Required value

Manual GUI location

ETH1_DHCP

off

Basic > Network > Setup Method – Use Static IP Address

ETH1_IP_ADDRESS

Assigned gateway IP

Basic > Network > IP Address

ETH1_NETMASK

Assigned subnet mask

Basic > Network > Subnet Mask

ETH2_IP_ADDRESS

Site-specific or blank

Basic > Network > ETH2 IP Address

ETH2_NETMASK

Site-specific or blank

Basic > Network > ETH2 Netmask

DNS_RESOLVE

Site-specific DNS mode

Basic > Network > DNS

DNS_SERVER

Primary DNS server

Basic > Network > Primary DNS

DNS_SERVER2

Secondary DNS server

Basic > Network > Secondary DNS

Configure the site’s default gateway at Basic > Network > Default gateway. If the BroadWorks profile exposes a default-gateway tag, populate it before rebuilding; otherwise enter it manually after import.

[NETWORK]
ETH1_DHCP=%ETH1_DHCP%
ETH1_IP_ADDRESS=%ETH1_IP_ADDRESS%
ETH1_NETMASK=%ETH1_NETMASK%
ETH2_IP_ADDRESS=%ETH2_IP_ADDRESS%
ETH2_NETMASK=%ETH2_NETMASK%
DNS_RESOLVE=%DNS_RESOLVE%
DNS_SERVER=%DNS_SERVER%
DNS_SERVER2=%DNS_SERVER2%

image-20261009-005301.png

After import, reconnect to https://<assigned-ETH1-IP-address> and verify the address, subnet mask, default gateway, and DNS values.

Country-tone tag

COUNTRY=%COUNTRY%

%COUNTRY%

Country/region

1

United States

7

Russia

30

Greece

33

France

34

Spain

39

Italy

44

United Kingdom

49

Germany

52

Mexico

54

Argentina

56

Chile

60

Malaysia

61

Australia

62

Indonesia

63

Philippines

65

Singapore

81

Japan

82

Korea

86

China

90

Turkey

91

India

92

Pakistan

98

Iran

213

Algeria

249

Sudan

263

Zimbabwe

327

Kazakstan

852

Hong Kong

886

Taiwan

971

United Arab Emirates

972

Israel

For the United States, set %COUNTRY% to 1. After import, verify or change the selection at Advanced > Tones.

image-20261009-005335.png

Time-zone tag

TIMEZONE=%TIMEZONE%

Preserve capitalization, hyphens, and underscores exactly.

%TIMEZONE%

Gateway display

Midway

(GMT-11:00) Midway

Hawaii

(GMT-10:00) Hawaii

Alaska

(GMT-09:00) Alaska

Los_Angeles

(GMT-08:00) Los Angeles

Denver

(GMT-07:00) Denver

Phoenix

(GMT-07:00) Phoenix

Chicago

(GMT-06:00) Chicago

Regina

(GMT-06:00) Regina

Mexico_City

(GMT-06:00) Mexico City

New_York

(GMT-05:00) New York

Bogota

(GMT-05:00) Bogota

Glace_Bay

(GMT-04:00) Glace Bay

South_Georgia

(GMT-04:00) South Georgia

Newfoundland

(GMT-03:30) Newfoundland

Buenos_Aires

(GMT-03:00) Buenos Aires

Azores

(GMT-01:00) Azores Islands

Cape_Verde

(GMT-01:00) Cape Verde

GMT

(GMT) Greenwich Mean Time

London

(GMT) London

Amsterdam

(GMT+01:00) Amsterdam

Cairo

(GMT+02:00) Cairo

Tel_Aviv

(GMT+02:00) Tel Aviv

Harare

(GMT+02:00) Harare

Moscow

(GMT+03:00) Moscow

Tehran

(GMT+03:30) Tehran

Dubai

(GMT+04:00) Dubai

Muscat

(GMT+04:00) Muscat

Kabul

(GMT+04:30) Kabul

Karachi

(GMT+05:00) Karachi

Kolkata

(GMT+05:30) Kolkata

Kathmandu

(GMT+05:45) Kathmandu

Almaty

(GMT+06:00) Almaty

Bangkok

(GMT+07:00) Bangkok

Jakarta

(GMT+07:00) Jakarta

Beijing

(GMT+08:00) Beijing

Kuala_Lumpur

(GMT+08:00) Kuala Lumpur

Singapore

(GMT+08:00) Singapore

Taipei

(GMT+08:00) Taipei

Adelaide

(GMT+09:30) Adelaide

Canberra

(GMT+10:00) Canberra

Magadan

(GMT+11:00) Magadan

Auckland

(GMT+12:00) Auckland

GMT-12

(GMT+12:00) International Date Line East

Example site

%COUNTRY%

%TIMEZONE%

Florida

1

New_York

California

1

Los_Angeles

United Kingdom

44

London

After import, verify or change the selection at Advanced > System time.

image-20261009-005401.png

9. Routing-rule reference

Rules are evaluated from top to bottom. Put exact matches before broad wildcard rules and digit or caller-ID manipulation before the associated ROUTE or END action.

Routing sources

Source

Meaning

ISDN[1]

Call received from T1/ISDN interface 1

ISDN[2]

Call received from T1/ISDN interface 2

IP

Call received from the configured SIP/IP side

IP[127.0.0.1]

Call received through the local loopback path

Number patterns

Pattern

Meaning

X

One wildcard digit; repeated X characters define the expected length

XXX

Three-digit number

XXXX

Four-digit number or PBX extension

XXXXXXX

Seven-digit number

141414

Exact called-number match

CPN

Operate on the Calling Party Number instead of the Called Party Number

CPNX

Any Calling Party Number

CPNXXXXXXX

Seven-digit Calling Party Number pattern

CPN[1-9]

Calling Party Number beginning with digits 1 through 9

Commands

Command

Function

Example

ADD

Adds digits or text to the front of the matched number

ISDN[1] CPNX ADD 00

REMOVE

Removes the specified number of characters

IP EVAJUPITERX REMOVE 10

KEEP

Retains the specified portion; a negative value keeps digits from the end

IP X KEEP -4

REPLACE

Replaces the matched called number or CPN

ISDN[1] 1530 REPLACE 141414

ROUTE IP

Sends the call to a SIP/IP destination

ISDN[1] X ROUTE IP 127.0.0.1:5060

ROUTE ISDN

Sends the call to a T1/ISDN interface

IP X ROUTE ISDN 2

END

Stops processing for the matching path after manipulation

ISDN[1] 1530 END

Navigate to Routing > Routing table, paste only the ordered rule lines, and click Save. Do not paste [ROUTE] or ROUTE_TABLE= into the GUI field.

image-20261009-005428.png

Group ID removal

REMOVE 10 removes the ten-character Group ID EVAJUPITER; it does not remove a four-digit extension. The remaining extension can have another supported length. If the Group ID changes, change the removal count to its exact character count.

IP CPNEVAJUPITERX REMOVE 10 removes the Group ID from the calling number so the PBX displays the remaining extension. IP EVAJUPITERX REMOVE 10 removes it from the called number before routing the extension to the PBX.

10. TLS, SRTP, DNS SRV, and NAPTR

Enable TLS registration

  1. Navigate to Basic > SIP.

  2. Set Registrar server to the assigned secure SBC FQDN using port 5061.

  3. Set Proxy server to the same secure SBC FQDN using port 5061.

  4. Under TLS & SRTP, set TLS SIP Server to the same secure SBC FQDN using port 5061.

  5. Set the gateway’s Local signaling port to 5061.

  6. Leave Only Accept Trusted Certificates cleared unless the approved deployment requires it.

  7. Set SRTP mode to Mandatory.

  8. Under DNS SRV, select Enable.

  9. Click Save.

  10. Reboot the gateway. The reboot is required so the gateway can register again using TLS.

  11. After the gateway returns, confirm that it is registered to the secure SBC over TLS.

Use the same regional secure SBC destination in all three server fields. The TLS port must be included directly after the FQDN as :5061.

Region

Secure SBC value to enter

United States

us-sbc-secure.14ip.net:5061

Europe

eu-sbc-secure.14ip.net:5061

APAC

apac-sbc-secure.14ip.net:5061

For example, a United States deployment must use the following values:

Registrar server: us-sbc-secure.14ip.net:5061
Proxy server: us-sbc-secure.14ip.net:5061
TLS SIP Server: us-sbc-secure.14ip.net:5061

image-20261009-005505.png

Verify SIP_TRANSPORT and DNS_SRV_NAPTR through the XML procedure in Section 12 when troubleshooting or confirming the imported configuration.

The tested gateway GUI does not provide a separate SIP transport selector. On the tested firmware, configuring the TLS SIP Server, using the secure FQDN and port 5061 for the Registrar and Proxy, saving, and rebooting causes the gateway’s external SIP registration to use TLS. The internal SIP_TRANSPORT parameter should report 2 for TLS. Port 5061 alone is not proof that TLS is active.

Confirm the active transport after reboot by checking SIP_TRANSPORT through XML and reviewing the SIP log for SIP/2.0/TLS or transport=tls on traffic to the secure SBC. UDP traffic to the local 127.0.0.1 loopback can still appear in EV Connect Pro logs and does not mean that the external SBC connection is using UDP.

Secure setting

Expected value

Location

Registrar server

Secure SBC FQDN with :5061

Basic > SIP > Registrar server

Proxy server

Secure SBC FQDN with :5061

Basic > SIP > Proxy server

TLS SIP server

Secure SBC FQDN with :5061

Basic > SIP > TLS SIP Server

SIP signaling port

5061

Basic > SIP > Local signaling port

SRTP mode

Mandatory

Basic > SIP > SRTP mode

DNS SRV

Enable

Basic > SIP > DNS SRV

SIP transport

TLS; tested parameter value 2

XML parameter SIP_TRANSPORT

DNS NAPTR

yes

XML parameter DNS_SRV_NAPTR

image-20261009-005523.png

11. Connect Without Internet behavior

The routing table does not monitor Internet access or registration by itself. The loopback rules provide the PBX destination after the gateway’s SIP failure logic returns a failed EVA call to 127.0.0.1.

Verify these failover parameters in the imported file or through XML lookup:

IP_FAIL_FALLBACK_METHOD=1
IP_FAILOVER_TIME=30
DNS_SRV_SUPPORT=1
DNS_SRV_NAPTR=yes
DNS_SRV_FAIL_TO=300
SIP_FG_INV_REG=1

Expected behavior:

  1. While EVA is reachable, 141414 and 141415 use the registered SIP path.

  2. If EVA cannot be reached and the gateway invokes its failure path, the failed call returns through 127.0.0.1.

  3. The routing table changes the EVA number to the configured PBX fallback extension.

  4. When SIP reachability recovers, calls return to the normal EVA path.

Validate both loss and restoration of registration. Loopback rules alone do not prove that failover detection and automatic recovery are working.

12. XML parameter lookup and controlled changes

The XML interface returns the firmware-specific parameter ID and current value:

https://<gateway-ip>/xml?method=gw.config.get&name=SIP_TRANSPORT
https://<gateway-ip>/xml?method=gw.config.get&name=DNS_SRV_NAPTR

An enabled NAPTR response can show value="yes".

After obtaining the parameter ID, change its value with:

https://<gateway-ip>/xml?method=gw.config.set&id<ID>=<VALUE>

Always run get first. IDs can vary by firmware, so never reuse an ID taken from another gateway or software version. Record the original value before changing it.