A very popular router nowadays is the Mikrotik router. The reason it is popular is its intuitive interface. It is effortless to configure and manage. With the help of the Mikrotik router, network administration can be done from bandwidth management. In this post, we will see how to port forward Grandstream UCM IPPBX server port forwarding with the help of the Mikrotik router.
Platform Requirements:
1. Grandstream UCM6xxx IP PBX Server
2. Mikrotik Router
3. Public IP for the Mikrotik Router
Describes Configuration of Grandstream IPPBX server for NAT using Mikrotik Router
Step-1: UCM Network Configuration
Connecting the UCM using static private IP
We have configured the UCM by a static private IP (172.16.1.30) assigned by
Mikrotik router.
Step-2: UCM internal Configuration
➢ NAT Should be enabled in each extension
Edit Extension→ Media→ Check the NAT option
➢ SIP General Settings
Bind UDP port should be changed from 5060 to 5090
PBX Settings→SIP Settings→General→ Bind UDP port→5090
➢ NAT settings should be changed as follows
PBX Settings→SIP Settings→NAT
External Host = Public IP (103.230.62.116) of the Mikrotik
External UDP Port = 5090
External TCP Port = 5090
External TLS Port = 5091
Local Network Address = Local IP network of the router (172.16.1.0/24)
➢ RTP Settings
Change the RTP Start & RTP end port to 10000 and 11000 respectively.
PBX Settings→RTP Settings→RTP Start→10000
PBX Settings→RTP Settings→RTP End→11000
These are settings to the UCM console for remote & Local ext. behind a NAT
Describes Configuration of Mikrotik Router
Assuming that the Mikrotik router has configured its basic settings
We are discussing the WAN & firewall settings of the Mikrotik router
Step-1: The Mikrotik router should be configured via a Public IP
We have configured our Mikrotik router by a public IP (103.230.62.116) in the
WAN port
Step-2: Mikrotik Firewall Settings
➢ Disable SIP ALG
IP→ Firewall→ Service Port→SIP→ Press Disable
➢ Firewall NAT settings for TCP
IP→ Firewall→NAT→ Press (+)→ General
Chain = dstnat
Protocol = tcp
Dst. Port = 5090-5091
In Interface = WAN Interface
Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 5090-5091
Click Apply & OK Button
➢ Firewall NAT settings for UDP
IP→ Firewall→NAT→ Press (+)→ General
Chain = dstnat
Protocol = UDP
Dst. Port = 5090-5091
In Interface = WAN Interface
Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 5090-5091
Press Apply & OK Button
➢ Firewall NAT settings for RTP port (TCP protocol)
IP→ Firewall→NAT→ Press (+)→ General
Chain = dstnat
Protocol = TCP
Dst. Port = 10000-11000
In Interface = WAN Interface
Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 10000-11000
Click Apply & OK Button
➢ Firewall NAT settings for RTP port (UDP protocol)
IP→ Firewall→NAT→ Press (+)→ General
Chain = dstnat
Protocol = UDP
Dst. Port = 10000-11000
In Interface = WAN Interface
Click Apply & OK Button
Go to Action Tab
Action = dst-nat
To Address = To the private IP of the UCM (172.16.1.30)
To Port = 10000-11000
Click Apply & OK Button
This short guide takes you through the steps required to setup Grandstream UCM IPPBX port forwarding or NAT with Mikrotik Router.
No Comments