The below steps provide guidance on integrating an Grandstream ATA with LoopUp to provide service to Fax and Analogue devices.
Step 1: Prerequisites
Please note that all steps below assume that the device is online and operational on your local network with the following configuration in place:
- Default credentials have been changed
- Static local IP address
- Accessible from the internet via one of the below methods
- Direct public IP address allocation
- NAT/PAT
- If TLS is to be configured customer provided public certificate will be required
Step 2: LoopUp SIP Trunk Provisioning
- Navigate to the SIP Trunking Setup article and follow the process to deploy a SIP Trunk with LoopUp
Step 3: Firewall Rules
The below rules will need to be in place to allow the required signalling and media traffic.
Source & Destination
Depending on the region selected, utilise the below as the Source LoopUp Endpoint 1 & 2 for your firewall rules:
- AMER
- usdc1-edgesbc.loopup.com - 176.74.7.53
- usdc2-edgesbc.loopup.com - 176.74.3.253
- EMEA
- ukdc1-edgesbc.loopup.com - 176.74.5.5
- ukdc2-edgesbc.loopup.com - 185.66.35.35
- APAC
- ausdc1-edgesbc.loopup.com - 176.74.1.4
- hkdc1-edgesbc.loopup.com - 185.66.34.4
The Destination for your firewall rules will be the ATA Public IP.
Signalling
- Source Port: Any
- Destination Port: UDP/TCP:5060 or TLS:5061
Media
- Source Port: Any
- Destination Port: UDP 7000 - 65535
Step 4: Device Configuration
Basic Settings
- Time Zone: set based on the device's location
Advanced Settings
- NTP Server: specify a valid NTP server, e.g., pool.ntp.org
If using TLS, then also set the following
- Validate Server Certificate: Yes
- Disable Weak TLS Cipher Suites: Disable all of the above weak TLS cipher suites
- Minimum TLS Version: TLS 1.2
- Maximum TLS Version: TLS 1.2
- Apply Certificates: see section below
FXS Port
Depending on the protocol and region selected, fill out the Primary SIP Server and Failover SIP Server as follows:
For UDP or TCP replace port below with 5060, for TLS use 5061
- AMER
- Primary SIP Server: usdc1-edgesbc.loopup.com:port
- Failover SIP Server: usdc2-edgesbc.loopup.com:port
- EMEA
- Primary SIP Server: ukdc1-edgesbc.loopup.com:port
- Failover SIP Server: ukdc2-edgesbc.loopup.com:port
- APAC
- Primary SIP Server: ausdc1-edgesbc.loopup.com:port
- Failover SIP Server: hkdc1-edgesbc.loopup.com:port
- SIP User ID: The telephone number assigned to the device attached to this device in full E.164 format
- SIP Registration: Off
- Outgoing Call Without Registration: Yes
- OPTIONS/NOTIFY Keep Alive: OPTIONS
- Local SIP Port: The signalling listening port for this device
- Local RTP Port: The RTP port for this device
- Use Random SIP Port: No
- Use Random RTP Port: No
- Enable RTCP: Yes
- Use NAT IP: The public IP address of this device
- Crypto Life Time: Disabled
If using TLS, then also set the following
- From Domain: the FQDN of the ATA that is included in the certificate
- SIP Transport: TLS
- SRTP Mode: Enabled and forced
Certificate
This section only applies if you are using TLS.
- Trusted CA Certificate A: Paste the LoopUp certificate chain (intermediate certificates, and root certificate) in PEM formatted clear text
- SIP TLS Certificate: Paste the device certificate in PEM formatted clear text
- SIP TLS Private Key: Paste the device certificate's private key in PEM formatted clear text
Applying Changes
Simply click Apply to save the changes. Clicking Update will just commit the configuration to flash without applying.
Troubleshooting
To enable SIP logs on the device set the following
- Send SIP Logs: Yes
To access the SIP logs, navigate to Status, then select SIP File, and click Preview
Admin Guide
The official administration guide can be found on Grandstream's website here.