BroadSoft SIP Trunk
Quick Guide 16 Document #: LTRT-14020
5.2 Configure a Network Interface for the Device
You can connect the device to the DMZ network using one of the following methods:
Method A: (Preferred method) A global IP address is provided to the device (without
NAT):
Figure 5-2: Method A
The Enterprise firewall is configured with rules, for example:
Original
Source Destination Ports/Service
<any>
(e.g. ITSP)
Global IP Address
(public address)
SIP service: 5060 / UDP
RTP service: 6000-8500 / UDP
Method B: A local DMZ IP address behind NAT:
Figure 5-3: Method B
The firewall is configured with rules, for example:
Original Translated
Source Destination Ports/Service Source Destination Ports/Service
<any>
(e.g. ITSP)
Global IP Address
(public address)
SIP service: 5060 / UDP
RTP service: 6000-8500 /
UDP
<any>
(e.g. ITSP)
Local DMZ IP
Address
<as original>
NAT rules (port forwarding):
Source Destination Ports/Service Source Destination Ports/Service
<any>
(e.g. ITSP)
Global IP Address
(public address)
SIP service: 5060 / UDP
RTP service: 6000-8500 /
UDP
<any>
(e.g. ITSP)
Local DMZ IP
Address
<as original>
Local DMZ IP
Address
<any>
(e.g. ITSP)
SIP service: 5060 / UDP
RTP service: 6000-8500 /
UDP