Grandstream Bangladesh IPPBX

How to Port Forwarding on IPPBX with Mikrotik Router

13/07/2024
How to NAT Grandstream IPPBX with Miktotik Router

A very popular router nowadays is the Mikrotik router. The reason it is popular is its intuitive interface. It is effortless to configure and manage. With the help of the Mikrotik router, network administration can be done from bandwidth management. In this post, we will see how to port forward Grandstream UCM IPPBX server port forwarding with the help of the Mikrotik router.

Platform Requirements:
1. Grandstream UCM6xxx IP PBX Server
2. Mikrotik Router
3. Public IP for the Mikrotik Router

Describes Configuration of Grandstream IPPBX server for NAT using Mikrotik Router

Step-1: UCM Network Configuration
Connecting the UCM using static private IP
We have configured the UCM by a static private IP (172.16.1.30) assigned by
Mikrotik router.

Step-2: UCM internal Configuration
➢ NAT Should be enabled in each extension
Edit ExtensionMediaCheck the NAT option

➢ SIP General Settings
Bind UDP port should be changed from 5060 to 5090
PBX SettingsSIP SettingsGeneralBind UDP port5090

➢ NAT settings should be changed as follows
PBX SettingsSIP SettingsNAT
External Host = Public IP (103.230.62.116) of the Mikrotik
External UDP Port = 5090
External TCP Port = 5090
External TLS Port = 5091
Local Network Address = Local IP network of the router (172.16.1.0/24)

➢ RTP Settings
Change the RTP Start & RTP end port to 10000 and 11000 respectively.
PBX SettingsRTP SettingsRTP Start10000
PBX SettingsRTP SettingsRTP End11000

These are settings to the UCM console for remote & Local ext. behind a NAT

Describes Configuration of Mikrotik Router

Assuming that the Mikrotik router has configured its basic settings
We are discussing the WAN & firewall settings of the Mikrotik router

Step-1: The Mikrotik router should be configured via a Public IP
We have configured our Mikrotik router by a public IP (103.230.62.116) in the
WAN port

Step-2: Mikrotik Firewall Settings
➢ Disable SIP ALG
IPFirewallService PortSIPPress Disable

➢ Firewall NAT settings for TCP
IPFirewallNATPress (+)General
Chain = dstnat
Protocol = tcp
Dst. Port = 5090-5091
In Interface = WAN Interface

Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 5090-5091
Click Apply & OK Button

➢ Firewall NAT settings for UDP
IPFirewallNATPress (+)General
Chain = dstnat
Protocol = UDP
Dst. Port = 5090-5091
In Interface = WAN Interface

Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 5090-5091
Press Apply & OK Button

➢ Firewall NAT settings for RTP port (TCP protocol)
IPFirewallNATPress (+)General
Chain = dstnat
Protocol = TCP
Dst. Port = 10000-11000
In Interface = WAN Interface

Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 10000-11000
Click Apply & OK Button

➢ Firewall NAT settings for RTP port (UDP protocol)
IPFirewallNATPress (+)General
Chain = dstnat
Protocol = UDP
Dst. Port = 10000-11000
In Interface = WAN Interface
Click Apply & OK Button

Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 10000-11000
Click Apply & OK Button

This short guide takes you through the steps required to setup Grandstream UCM IPPBX port forwarding or NAT with Mikrotik Router.

You Might Also Like

No Comments

Leave a Reply