FourteenIP T1 Gateway Configuration Guide
The FourteenIP T1GW bridges SIP services with T1-based carrier and PBX equipment. This guide shows how to generate and import the BroadWorks configuration, followed by complete setup procedures in this order:
-
Default SIP or Reverse SIP
-
EV Connect
-
EV Connect Pro
The EV Connect and EV Connect Pro routing tables are included as editable text inside their respective setup sections. Additional tag references, routing syntax, TLS settings, failover behavior, and acceptance tests follow the deployment procedures.
Scope: BroadWorks generates the site configuration, but the technician downloads and imports it manually. This is not zero-touch autoprovisioning.
1. Hardware and factory access
Product overview
The FourteenIP T1GW is a carrier-grade SIP-to-T1 gateway used to connect BroadWorks or EVA SIP services to traditional T1 carrier and PBX equipment. It provides hardware DSP processing, T1 signaling, SIP trunking, call routing, digit manipulation, fax relay, and SIP failover functions in a 1U platform.
Hardware specifications
|
Specification |
Details |
|---|---|
|
Device type |
SIP-to-T1 gateway |
|
Form factor |
1U rack mount |
|
Dimensions |
44 x 440 x 300 mm |
|
Weight |
Approximately 3 kg |
|
Supported configuration |
One or two T1 trunks |
|
T1 capacity |
Up to 24 channels per enabled T1 interface |
|
T1 usage |
One trunk for Default SIP, Reverse SIP, or EV Connect; two trunks for EV Connect Pro |
|
Network interfaces |
Four 10/100/1000 Mbps RJ45 ports |
|
External network ports |
ETH1 and ETH2 |
|
Local management ports |
AUX1 and AUX2 |
|
Console port |
RJ45 RS-232 console |
|
Console speed |
115200 baud |
|
Console format |
8 data bits, no parity, 1 stop bit |
|
Management protocol |
HTTPS |
|
Signaling support |
PRI, CAS, Feature Group D, and E&M |
|
SIP support |
SIP trunking |
|
DSP processing |
Hardware DSP voice processing |
|
Codec support |
G.711 mu-law, G.711 A-law, and G.729A |
|
Fax support |
T.38 fax relay |
|
Power input |
100-240 VAC, 50/60 Hz |
|
Maximum power consumption |
18 W |
|
Operating temperature |
0-40 C |
|
Mounting |
Standard 19-inch rack |
|
Command-line management |
SSH |
The gateway GUI can expose both T1 and E1 choices. All deployment procedures in this guide use T1, mu-law, ESF, and B8ZS unless a documented site requirement states otherwise.
Physical installation and cabling
-
Mount the gateway in a grounded 19-inch rack with adequate airflow.
-
Connect protected AC power within the supported input range.
-
Connect the management Ethernet interface to the provisioning network.
-
For Default SIP, Reverse SIP, or EV Connect, connect the site’s single T1 circuit to Trunk 1.
-
For EV Connect Pro, connect the carrier/Vega circuit to Trunk 1 / ISDN 1 and the PBX circuit to Trunk 2 / ISDN 2. Label both cables before configuration so the ports are not reversed.
-
Do not assume that physical link indicates correct clocking or switch-side configuration. Confirm the DS1 link, D channel, and bearer channels after the software configuration is complete.
Factory network and credentials
|
Setting |
Factory value |
|---|---|
|
Factory IP address |
|
|
Factory subnet mask |
|
|
Factory gateway |
|
|
Factory hostname |
|
|
Factory web password |
(contact support) |
|
Post-import administrator password |
(contact support) |
Connect a workstation to the factory subnet and browse to:
https://192.168.2.240
The factory certificate can cause a browser warning. Continue only after confirming that the address belongs to the gateway being configured.
Factory SSH access
SSH is enabled by default on port 22. Connect with:
ssh (contact support for user)@<gateway-IP-address>
Use the factory SSH credentials:
|
Credential |
Factory value |
|---|---|
|
Username |
(contact support) |
|
Password |
(contact support) |
For administrator access, enter (contact support) and use the factory administrator password (contact support) when prompted. Change or secure factory credentials according to the approved deployment procedure after installation.
2. BroadWorks configuration and file download
Create the BroadWorks assignment
-
Create the required trunk and pilot user in BroadWorks.
-
Select
FourteenIP_T1GWas the Identity/Device Profile Type. -
Confirm the trunk-group identity, pilot authentication user, password, SIP domain, and Calling Line ID values.
-
Open the assigned Identity/Device Profile.
-
Select Custom Tags.
-
Enter the site network, country-tone, and time-zone values described in Section 8.
-
Save the profile.
BroadWorks displays tag names without surrounding percent signs. In the template, the same value appears as %TAG_NAME%.
Rebuild and select the deployment file
-
Open the Identity/Device Profile Files tab.
-
Click Rebuild the files when the profile or tag values have changed.
-
Wait for the rebuild to complete.
-
Locate the file for the required deployment.
-
Download the Repository File, not the Template File.
|
Deployment |
File row to select |
|---|---|
|
Default SIP or Reverse SIP |
Filename containing |
|
EV Connect |
Filename containing |
|
EV Connect Pro |
Filename containing |
Use the complete generated filename shown by BroadWorks. Every gateway import file must be an .ini file.
Screenshot note: Some beta screenshots show the former Redstone profile name or an earlier device-type label. Production profiles display
FourteenIP_T1GW; the Files-tab workflow and deployment file labels remain the same.
3. Import the BroadWorks file
-
Sign in to the gateway at its current management address.
-
Navigate to Tools > Configuration Maintenance.
-
Under Import data, click Choose File.
-
Select the downloaded BroadWorks Repository File.
-
Click Import.
-
When the confirmation page appears, click Next.
-
Confirm that the upload completes successfully.
-
Do not interrupt power or network connectivity during the import.
-
Reboot when prompted.
-
Reconnect using the imported static IP address and post-import administrator password.
4. Deployment profiles
|
Deployment |
SIP registrar mode |
T1 interfaces |
Timing source |
Trunk 1 switch side |
Trunk 2 switch side |
|---|---|---|---|---|---|
|
Default SIP |
Per SIP trunk |
1 |
Local |
Network |
Disabled |
|
Reverse SIP |
Per SIP trunk |
1 |
TDM 1 |
User |
Disabled |
|
EV Connect |
Per gateway |
1 |
Local |
Network |
Disabled |
|
EV Connect Pro |
Per gateway |
2 |
TDM 1 |
User – carrier side |
Network – PBX side |
5. Default SIP and Reverse SIP setup
Default SIP and Reverse SIP use Per SIP trunk registration. Reverse SIP follows the same process with TDM 1 timing and the Trunk 1 switch side set to User.
Step 1 – Configure SIP registration
-
Navigate to Basic > SIP.
-
Enter the assigned Registrar server, Proxy server, SIP domain, and signaling port.
-
Set SIP Registrar mode to Per SIP trunk.
-
Click Save.
-
Open Basic > SIP Repeater, which becomes available after Per SIP trunk mode is saved.
-
Enter the trunk registration username, authentication name, password, and registration expiration.
The screenshot identifies the Basic SIP fields. Use the assigned BroadWorks values and select Per SIP trunk for Default SIP and Reverse SIP.
Step 2 – Configure the DS1 interface
Navigate to Basic > DS1 configuration.
|
Setting |
Default SIP |
Reverse SIP |
|---|---|---|
|
DS1 type |
T1 |
T1 |
|
PCM codec |
mu-law |
mu-law |
|
Timing source |
Local |
TDM 1 |
|
Gain to IP |
0 dB |
0 dB |
|
Framing |
ESF |
ESF |
|
Line code |
B8ZS |
B8ZS |
|
Line length |
Short haul/110 ft |
Short haul/110 ft |
|
Signaling type |
ISDN, unless the site requires CAS |
ISDN, unless the site requires CAS |
Disable the unused second T1 interface.
Step 3 – Configure Trunk 1 and P-Preferred-Identity
Navigate to Trunk > Trunk 1.
|
Setting |
Default SIP |
Reverse SIP |
|---|---|---|
|
Enable |
Enabled |
Enabled |
|
D channel |
Timeslot 24 |
Timeslot 24 |
|
Switch side |
Network |
User |
|
Signaling Standard |
NI-2 |
NI-2 |
|
Circuit hunting |
Forward |
Forward |
|
ISDN-B channels |
Channels 1 through 23 |
Channels 1 through 23 |
Enter P-Preferred-Identity in this exact format:
<sip:TRUNK-IDENTITY@SIP-DOMAIN>
Example:
<sip:3213061506@dmstg.ev.com>
Step 4 – Configure Advanced SIP for PPI
Navigate to Advanced > SIP.
|
Setting |
Required value |
|---|---|
|
IMS |
Enabled |
|
PAI or PPI |
PPI |
|
Username add domain |
Unchecked |
|
Re-register on INVITE failure |
Enabled |
|
Do not validate Via |
Enabled for the tested profile |
Step 5 – Configure site routing and test
Open Routing > Routing table and apply the routing table approved for the Default SIP or Reverse SIP site. Save the table, then verify registration, T1 link state, inbound calling, outbound calling, caller ID, DTMF, audio, and disconnect behavior.
6. EV Connect setup
EV Connect uses one T1 interface for the PBX and Per gateway EVA registration.
Step 1 – Configure EVA registration
-
Navigate to Basic > SIP.
-
Enter the EVA Registrar server, Proxy server, subdomain, username, authentication name, password, and registration expiration.
-
Set SIP Registrar mode to Per gateway.
-
Configure TLS, SRTP, DNS SRV, and NAPTR as described in Section 10.
-
Click Save.
Step 2 – Configure DS1, Trunk 1, and PPI
-
Under Basic > DS1 configuration, use T1, mu-law, Local timing, ESF, B8ZS, Short haul/110 ft, and ISDN unless the site requires CAS.
-
Disable the unused second T1 interface.
-
Under Trunk > Trunk 1, set the switch side to Network.
-
Use Timeslot 24, NI-2, Forward hunting, and B channels 1 through 23.
-
Enter the EVA P-Preferred-Identity on Trunk 1 in the form
<sip:EVA-USER@EVA-DOMAIN>.
Step 3 – Configure Advanced SIP
Navigate to Advanced > SIP and enable IMS, select PPI, leave Username add domain unchecked, enable Re-register on INVITE failure, and apply the tested Via-validation setting.
Step 4 – Enter the EV Connect routing table
Replace the site-specific examples before saving:
|
Example value |
Meaning |
|---|---|
|
|
Approved emergency number (Emergency Numbers will vary depending on Site) |
|
|
Emergency caller ID ( Change accordingly with the emergency CLID you wish to put for your site) |
|
|
EVA access numbers |
|
|
BroadWorks Group ID ( Dymanic tags will change GROUP ID for specified site) |
|
|
Character count of the Group ID ( Allows for the extension to be read by the pbx when no alternate trunk identity is present) |
|
|
Standard outbound caller ID ( Change accordingly for your site) |
|
|
PBX front-desk/fallback extension ( Number will vary depending on the extension of front Desk for site that this will fall over to if EVA cannot be reached) |
Navigate to Routing > Routing table and paste these editable rules:
ISDN[1] 933 REPLACE CPN-4/3213061530 ISDN[1] 933 END ISDN[1] 141414 REPLACE CPN0/EVAJUPITER ISDN[1] 141414 END ISDN[1] 141415 REPLACE CPN0/EVAJUPITER ISDN[1] 141415 END ISDN[1] CPNXXXXXXX END ISDN[1] CPNX REPLACE 3213061541 ISDN[1] X END IP CPNEVAJUPITERX REMOVE 10 IP[127.0.0.1] 141414 REPLACE 7368 IP[127.0.0.1] 141414 ROUTE ISDN 1 IP[127.0.0.1] 141415 REPLACE 7368 IP[127.0.0.1] 141415 ROUTE ISDN 1 IP EVAJUPITERX REMOVE 10 IP X ROUTE ISDN 1
The table is editable text. Technicians can copy it, replace site values, or remove rules that are not approved for the deployment.
Step 5 – Validate EV Connect
-
PBX calls to
141414and141415reach EVA. -
EVA transfers reach PBX extensions with and without Alternate Trunk ID.
-
Seven-or-more-digit caller IDs remain unchanged.
-
Short extension caller IDs use the site outbound caller ID.
-
933reads back the expected emergency caller ID and registered address. -
When EVA is unreachable and the gateway returns the failed call locally, both EVA numbers reach the PBX fallback extension.
-
When EVA connectivity returns, calls return to the normal EVA path.
7. EV Connect Pro setup
EV Connect Pro physically separates the carrier and PBX paths:
Carrier/Vega <-> Trunk 1 / ISDN 1 <-> FourteenIP T1GW <-> Trunk 2 / ISDN 2 <-> PBX
|
+---- SIP/TLS ---- EVA
Trunk 1 faces the carrier and operates as User. Trunk 2 faces the PBX and operates as Network.
Step 1 – Configure EVA registration
-
Navigate to Basic > SIP.
-
Enter the EVA Registrar server, Proxy server, subdomain, registration username, authentication name, password, and registration expiration.
-
Select Per gateway.
-
Apply the TLS settings in Section 10.
-
Click Save.
Step 2 – Configure both DS1 interfaces
Navigate to Basic > DS1 configuration.
|
Setting |
Required value |
|---|---|
|
DS1 type |
T1 |
|
PCM codec |
mu-law |
|
Timing source |
TDM 1 |
|
Gain to IP |
0 dB |
|
Framing |
ESF on both interfaces |
|
Line code |
B8ZS on both interfaces |
|
Line length |
Short haul/110 ft on both interfaces |
|
Signaling type |
ISDN on both interfaces |
Step 3 – Configure Trunk 1 for the carrier
Navigate to Trunk > Trunk 1 and configure:
|
Setting |
Value |
|---|---|
|
Enable |
Enabled |
|
Name |
Carrier or site-approved name |
|
P-Preferred-Identity |
|
|
D channel |
Timeslot 24 |
|
Switch side |
User |
|
Signaling Standard |
NI-2 |
|
Circuit hunting |
Forward |
|
ISDN-B channels |
Channels 1 through 23 |
Step 4 – Configure Trunk 2 for the PBX
Navigate to Trunk > Trunk 2 and configure:
|
Setting |
Value |
|---|---|
|
Enable |
Enabled |
|
Name |
PBX or site-approved name |
|
P-Preferred-Identity |
Same |
|
D channel |
Timeslot 24 |
|
Switch side |
Network |
|
Signaling Standard |
NI-2 |
|
Circuit hunting |
Forward |
|
ISDN-B channels |
Channels 1 through 23 |
Step 5 – Configure Advanced SIP for PPI
Navigate to Advanced > SIP and configure:
|
Setting |
Required value |
|---|---|
|
IMS |
Enabled |
|
PAI or PPI |
PPI |
|
Username add domain |
Unchecked |
|
Re-register on INVITE failure |
Enabled |
|
Do not validate Via |
Enabled for the tested profile |
These settings allow the P-Preferred-Identity configured on both trunks to be used when calls move among the carrier, PBX, and EVA paths.
Step 6 – Enter the EV Connect Pro routing table
Replace the site-specific examples before saving:
|
Example value |
Meaning |
|---|---|
|
|
Mainlines last 4 digits ( Most PBXs only recieve 4 digits |
|
|
EVA External and Internal access numbers |
|
|
BroadWorks Group ID (Dynamically assigned via tags) |
|
|
Character count of the Group ID ( meant only to allow Extension to be read in event that Alternate Trunk ID is not used) |
|
|
Standard outbound caller ID for short extensions ( CLID manipulation allows you to manipulate caller ID anyway you choose but it must be a valid number |
|
|
PBX front-desk/fallback extension if EVA cannot be reached |
|
|
Approved emergency number (Emergency Number will vary depending on site) |
Navigate to Routing > Routing table and change whatever your mainline, emergency number, CLID and fallback number will be for your specified site(Group IDs will already be assigned dynamically via Broadworks):
ISDN[1] 1530 REPLACE 141414 ISDN[1] 1530 END ISDN[1] CPNX ADD 00 ISDN[1] X ROUTE IP 127.0.0.1:5060 ISDN[2] 141414 REPLACE CPN0/EVAJUPITER ISDN[2] 141414 END ISDN[2] 141415 REPLACE CPN0/EVAJUPITER ISDN[2] 141415 END ISDN[2] XXXXXXX ROUTE IP 127.0.0.1:5060 ISDN[2] XXXX END ISDN[2] XXX ROUTE IP 127.0.0.1:5060 IP[127.0.0.1] CPN00 REMOVE 2 IP[127.0.0.1] CPN00 ROUTE ISDN 2 IP[127.0.0.1] 141414 REPLACE 7368 IP[127.0.0.1] 141414 ROUTE ISDN 2 IP[127.0.0.1] 141415 REPLACE 7368 IP[127.0.0.1] 141415 ROUTE ISDN 2 IP EVAJUPITERX REMOVE 10 IP EVAJUPITERX ROUTE ISDN 2 IP[127.0.0.1] CPNXXXXXXX ROUTE ISDN 1 IP[127.0.0.1] CPNX REPLACE 3213061535 IP[127.0.0.1] 933 ROUTE ISDN 1 IP[127.0.0.1] XXXXXXX ROUTE ISDN 1 IP[127.0.0.1] XXX ROUTE ISDN 1 IP XXXXXXX ROUTE ISDN 1 IP[127.0.0.1] XXXX ROUTE ISDN 2 IP X ROUTE ISDN 2
The table is an example of what it will look like when you see it in the Gateway. The table will already be inserted once you import the config, and you can change accordingly with your sites specified numbers.
8. Additional BroadWorks tags
These site values can be selected before the file is rebuilt and exported. The matching GUI location is included for verification or correction after import.
Network settings
The gateway ships at 192.168.2.240. Standard testing and production deployments use a static address.
|
BroadWorks tag |
Required value |
Manual GUI location |
|---|---|---|
|
|
|
Basic > Network > Setup Method – Use Static IP Address |
|
|
Assigned gateway IP |
Basic > Network > IP Address |
|
|
Assigned subnet mask |
Basic > Network > Subnet Mask |
|
|
Site-specific or blank |
Basic > Network > ETH2 IP Address |
|
|
Site-specific or blank |
Basic > Network > ETH2 Netmask |
|
|
Site-specific DNS mode |
Basic > Network > DNS |
|
|
Primary DNS server |
Basic > Network > Primary DNS |
|
|
Secondary DNS server |
Basic > Network > Secondary DNS |
Configure the site’s default gateway at Basic > Network > Default gateway. If the BroadWorks profile exposes a default-gateway tag, populate it before rebuilding; otherwise enter it manually after import.
[NETWORK] ETH1_DHCP=%ETH1_DHCP% ETH1_IP_ADDRESS=%ETH1_IP_ADDRESS% ETH1_NETMASK=%ETH1_NETMASK% ETH2_IP_ADDRESS=%ETH2_IP_ADDRESS% ETH2_NETMASK=%ETH2_NETMASK% DNS_RESOLVE=%DNS_RESOLVE% DNS_SERVER=%DNS_SERVER% DNS_SERVER2=%DNS_SERVER2%
After import, reconnect to https://<assigned-ETH1-IP-address> and verify the address, subnet mask, default gateway, and DNS values.
Country-tone tag
COUNTRY=%COUNTRY%
|
|
Country/region |
|---|---|
|
|
United States |
|
|
Russia |
|
|
Greece |
|
|
France |
|
|
Spain |
|
|
Italy |
|
|
United Kingdom |
|
|
Germany |
|
|
Mexico |
|
|
Argentina |
|
|
Chile |
|
|
Malaysia |
|
|
Australia |
|
|
Indonesia |
|
|
Philippines |
|
|
Singapore |
|
|
Japan |
|
|
Korea |
|
|
China |
|
|
Turkey |
|
|
India |
|
|
Pakistan |
|
|
Iran |
|
|
Algeria |
|
|
Sudan |
|
|
Zimbabwe |
|
|
Kazakstan |
|
|
Hong Kong |
|
|
Taiwan |
|
|
United Arab Emirates |
|
|
Israel |
For the United States, set %COUNTRY% to 1. After import, verify or change the selection at Advanced > Tones.
Time-zone tag
TIMEZONE=%TIMEZONE%
Preserve capitalization, hyphens, and underscores exactly.
|
|
Gateway display |
|---|---|
|
|
(GMT-11:00) Midway |
|
|
(GMT-10:00) Hawaii |
|
|
(GMT-09:00) Alaska |
|
|
(GMT-08:00) Los Angeles |
|
|
(GMT-07:00) Denver |
|
|
(GMT-07:00) Phoenix |
|
|
(GMT-06:00) Chicago |
|
|
(GMT-06:00) Regina |
|
|
(GMT-06:00) Mexico City |
|
|
(GMT-05:00) New York |
|
|
(GMT-05:00) Bogota |
|
|
(GMT-04:00) Glace Bay |
|
|
(GMT-04:00) South Georgia |
|
|
(GMT-03:30) Newfoundland |
|
|
(GMT-03:00) Buenos Aires |
|
|
(GMT-01:00) Azores Islands |
|
|
(GMT-01:00) Cape Verde |
|
|
(GMT) Greenwich Mean Time |
|
|
(GMT) London |
|
|
(GMT+01:00) Amsterdam |
|
|
(GMT+02:00) Cairo |
|
|
(GMT+02:00) Tel Aviv |
|
|
(GMT+02:00) Harare |
|
|
(GMT+03:00) Moscow |
|
|
(GMT+03:30) Tehran |
|
|
(GMT+04:00) Dubai |
|
|
(GMT+04:00) Muscat |
|
|
(GMT+04:30) Kabul |
|
|
(GMT+05:00) Karachi |
|
|
(GMT+05:30) Kolkata |
|
|
(GMT+05:45) Kathmandu |
|
|
(GMT+06:00) Almaty |
|
|
(GMT+07:00) Bangkok |
|
|
(GMT+07:00) Jakarta |
|
|
(GMT+08:00) Beijing |
|
|
(GMT+08:00) Kuala Lumpur |
|
|
(GMT+08:00) Singapore |
|
|
(GMT+08:00) Taipei |
|
|
(GMT+09:30) Adelaide |
|
|
(GMT+10:00) Canberra |
|
|
(GMT+11:00) Magadan |
|
|
(GMT+12:00) Auckland |
|
|
(GMT+12:00) International Date Line East |
|
Example site |
|
|
|---|---|---|
|
Florida |
|
|
|
California |
|
|
|
United Kingdom |
|
|
After import, verify or change the selection at Advanced > System time.
9. Routing-rule reference
Rules are evaluated from top to bottom. Put exact matches before broad wildcard rules and digit or caller-ID manipulation before the associated ROUTE or END action.
Routing sources
|
Source |
Meaning |
|---|---|
|
|
Call received from T1/ISDN interface 1 |
|
|
Call received from T1/ISDN interface 2 |
|
|
Call received from the configured SIP/IP side |
|
|
Call received through the local loopback path |
Number patterns
|
Pattern |
Meaning |
|---|---|
|
|
One wildcard digit; repeated |
|
|
Three-digit number |
|
|
Four-digit number or PBX extension |
|
|
Seven-digit number |
|
|
Exact called-number match |
|
|
Operate on the Calling Party Number instead of the Called Party Number |
|
|
Any Calling Party Number |
|
|
Seven-digit Calling Party Number pattern |
|
|
Calling Party Number beginning with digits 1 through 9 |
Commands
|
Command |
Function |
Example |
|---|---|---|
|
|
Adds digits or text to the front of the matched number |
|
|
|
Removes the specified number of characters |
|
|
|
Retains the specified portion; a negative value keeps digits from the end |
|
|
|
Replaces the matched called number or CPN |
|
|
|
Sends the call to a SIP/IP destination |
|
|
|
Sends the call to a T1/ISDN interface |
|
|
|
Stops processing for the matching path after manipulation |
|
Navigate to Routing > Routing table, paste only the ordered rule lines, and click Save. Do not paste [ROUTE] or ROUTE_TABLE= into the GUI field.
Group ID removal
REMOVE 10 removes the ten-character Group ID EVAJUPITER; it does not remove a four-digit extension. The remaining extension can have another supported length. If the Group ID changes, change the removal count to its exact character count.
IP CPNEVAJUPITERX REMOVE 10 removes the Group ID from the calling number so the PBX displays the remaining extension. IP EVAJUPITERX REMOVE 10 removes it from the called number before routing the extension to the PBX.
10. TLS, SRTP, DNS SRV, and NAPTR
Enable TLS registration
-
Navigate to Basic > SIP.
-
Set Registrar server to the assigned secure SBC FQDN using port
5061. -
Set Proxy server to the same secure SBC FQDN using port
5061. -
Under TLS & SRTP, set TLS SIP Server to the same secure SBC FQDN using port
5061. -
Set the gateway’s Local signaling port to
5061. -
Leave Only Accept Trusted Certificates cleared unless the approved deployment requires it.
-
Set SRTP mode to Mandatory.
-
Under DNS SRV, select Enable.
-
Click Save.
-
Reboot the gateway. The reboot is required so the gateway can register again using TLS.
-
After the gateway returns, confirm that it is registered to the secure SBC over TLS.
Use the same regional secure SBC destination in all three server fields. The TLS port must be included directly after the FQDN as :5061.
|
Region |
Secure SBC value to enter |
|---|---|
|
United States |
|
|
Europe |
|
|
APAC |
|
For example, a United States deployment must use the following values:
Registrar server: us-sbc-secure.14ip.net:5061 Proxy server: us-sbc-secure.14ip.net:5061 TLS SIP Server: us-sbc-secure.14ip.net:5061
Verify SIP_TRANSPORT and DNS_SRV_NAPTR through the XML procedure in Section 12 when troubleshooting or confirming the imported configuration.
The tested gateway GUI does not provide a separate SIP transport selector. On the tested firmware, configuring the TLS SIP Server, using the secure FQDN and port 5061 for the Registrar and Proxy, saving, and rebooting causes the gateway’s external SIP registration to use TLS. The internal SIP_TRANSPORT parameter should report 2 for TLS. Port 5061 alone is not proof that TLS is active.
Confirm the active transport after reboot by checking SIP_TRANSPORT through XML and reviewing the SIP log for SIP/2.0/TLS or transport=tls on traffic to the secure SBC. UDP traffic to the local 127.0.0.1 loopback can still appear in EV Connect Pro logs and does not mean that the external SBC connection is using UDP.
|
Secure setting |
Expected value |
Location |
|---|---|---|
|
Registrar server |
Secure SBC FQDN with |
Basic > SIP > Registrar server |
|
Proxy server |
Secure SBC FQDN with |
Basic > SIP > Proxy server |
|
TLS SIP server |
Secure SBC FQDN with |
Basic > SIP > TLS SIP Server |
|
SIP signaling port |
|
Basic > SIP > Local signaling port |
|
SRTP mode |
Mandatory |
Basic > SIP > SRTP mode |
|
DNS SRV |
Enable |
Basic > SIP > DNS SRV |
|
SIP transport |
TLS; tested parameter value |
XML parameter |
|
DNS NAPTR |
|
XML parameter |
11. Connect Without Internet behavior
The routing table does not monitor Internet access or registration by itself. The loopback rules provide the PBX destination after the gateway’s SIP failure logic returns a failed EVA call to 127.0.0.1.
Verify these failover parameters in the imported file or through XML lookup:
IP_FAIL_FALLBACK_METHOD=1 IP_FAILOVER_TIME=30 DNS_SRV_SUPPORT=1 DNS_SRV_NAPTR=yes DNS_SRV_FAIL_TO=300 SIP_FG_INV_REG=1
Expected behavior:
-
While EVA is reachable,
141414and141415use the registered SIP path. -
If EVA cannot be reached and the gateway invokes its failure path, the failed call returns through
127.0.0.1. -
The routing table changes the EVA number to the configured PBX fallback extension.
-
When SIP reachability recovers, calls return to the normal EVA path.
Validate both loss and restoration of registration. Loopback rules alone do not prove that failover detection and automatic recovery are working.
12. XML parameter lookup and controlled changes
The XML interface returns the firmware-specific parameter ID and current value:
https://<gateway-ip>/xml?method=gw.config.get&name=SIP_TRANSPORT https://<gateway-ip>/xml?method=gw.config.get&name=DNS_SRV_NAPTR
An enabled NAPTR response can show value="yes".
After obtaining the parameter ID, change its value with:
https://<gateway-ip>/xml?method=gw.config.set&id<ID>=<VALUE>
Always run get first. IDs can vary by firmware, so never reuse an ID taken from another gateway or software version. Record the original value before changing it.