Table of Contents
The below list details the firewall configuration for the Flo:One system to work as required.
Whilst the system typically uses either TCP or UDP we kindly ask that all the below is configured in case there’s a requirement to swap later down on in the service.
Important note: You must ensure SIP ALG is DISABLED across all firewall devices!
In general, it is best practice to use FQDNs and whitelist the domains:
- callswitchone.com
- yay.com
- voipcp.com
- yealink.com
If your firewall doesn’t support the use of FQDNs then please whitelist the following IP addresses.
‘Best practice’ settings for end users
Yealink Handset Auto-Provisioning #
- 195.224.255.10 (Port 53)
- 195.224.255.70 (Port 53)
- 52.71.103.102 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
- 52.29.124.181 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
- 3.124.165.251 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
- 51.11.241.228 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
- 20.19.96.56 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
- 20.242.144.0 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
- 20.242.144.1 (TCP – Source Port – 1023 to 65535, Destination Port 80, 443, 8443)
Flo-One Auto-Provisioning #
- 130.211.7.63 (Port 80 & 443 both LAN>WAN and WAN>LAN)
- 35.186.240.208 (Port 80 & 443 both LAN>WAN and WAN>LAN)
- 34.111.91.27 (Port 80 & 443 both LAN>WAN and WAN>LAN)
SIP Authentication #
- 34.105.209.181
- 34.147.142.100
- 34.89.77.216
- 34.89.33.0
- 35.246.58.184
- 34.147.181.186
- 35.234.151.7
- 35.197.230.12
- 34.105.130.238
- 34.89.66.152
RTP Addresses #
- 35.246.34.97
- 34.147.198.83
- 35.246.28.102
- 34.147.171.124
SIP Ports #
- 5060
- 5061
RTP Ports (UDP) #
- 10000 – 40000
