MagentaZuhause XL TELEKOM.DE mit Opnsense-FreePBX-Groundwire (PJSIP)

[joefrancois]

Hello everyone,

Sorry for writing in English, My Deutsch is certainly not that strong for me to write it in German. I thought I would document my current setup here for myself and anyone else that might find it helpful.

layout

VDSL Router --> opnsense (FW/NAT) --> FreePBX (PJSIP) ---- Groundwire for softphone

Opnsense - July 24th
FreePBX 16 - Asterisk 20.3.0

:Opnsense:
- need an outbound NAT from FreePBX to the internet with Static Port option turned on

:FreePBX:
Settings --> Advanced Settings
- SIP Channel Driver: chan_pjsip

Settings --> Asterisk SIP Settings --> General SIP Settings
- External Address: **Your external IP address - I use a Dynamic DNS name**
- Local Networks: **Internal Network - ie 192.168.0.0/255.255.255.0**
-RTP Port Ranges: Start: 10000 End: 20000
- RTP checksums: YES
- Strict RTP: YES
- RTP timeout: 30
- RTP hold timeout: 300
- RTP Keep Alive: 30 **this should be lower than your NAT time out on your FW**
- STUN Server Address: stun.t-online.de **put it in both places**
- Codecs:
*g722
*gsm
*alaw
*g729

Settings --> Asterisk SIP Settings --> SIP Settings [chan_pjsip]
-Allow Transports Reload: NO
- Enable Debug: NO
- Show Advanced Settings: YES
- Endpoint Identifier Order: ip username anonymous header auth_username
- udp - 0.0.0.0 - All: YES **you can specify your server IP if you want. This is also enabled for other ISPs besides TELEKOM.DE**
- tcp - 0.0.0.0 - All: YES **You can specify your server IP if you want. You need this for TELEKOM.DE to work**
- Port to Listen On: 5060 **Needed in two places**

Connectivity --> Trunks --> Add SIP (chan_pjsip) Trunk
Edit Trunk --> General
- Trunk Name: 08912345678
- Outbound CallerID: <08912345678>
- CID Options: Allow Any CID **you may choose Force Trunk CID as well**
- Maximum Channels: 2
-Asterisk Trunk Dial Options: System
- Continue if Busy: No
- Disable Trunk: No
- Monitor Trunk Failures: No

Edit Trunk --> pjsip Settings -->General
- Username: +498912345678
-Auth username: [email protected] **Email address you use to Telekom.de customer portal**
- Secret: **Portal password**
- Authentication: Outbound
- Registration: Send
- SIP server: tel.t-online.de
- SIP server port: 5060
- Context: from-pstn
-Transport: 0.0.0.0-tcp **or your server IP-tcp, it must be tcp not udp**

Edit Trunk --> pjsip Settings -->Advanced
- DTMF mode: In-band
- Permanent Auth Rejection: Yes
- Forbidden Retry Interval
- Fatal Retry Interval
- General Retry Interval
- Expiration
-Max Retries
- Qualify Frequency
- Outbound Proxy: sip:tel.t-online.de\;lr\;hide
- User = Phone: Yes
- Contact User: 08912345678
- From Domain: tel.t-online.de
- From User: +498912345678
- Client URI: sip:[email protected]
- Server URI: sip:tel.t-online.de\;transport=tcp
....
- Support Path: No
- Support T.38 UDPTL: No
- T.38 UDPTL Error Correction: None
- T.38 UDPTL NAT: No
- T.38 UDPTL MAXDATAGRAM: **blank**
- Fax Detect: No
- Trust RPID/PAI: No
- Send RPID/PAI: No
- Send Private CallerID Information: No
- Match Inbound Authentication: Username
- Inband Progress: Yes
- Direct Media: Yes
- Rewrite Contact: Yes
- RTP Symmetric: Yes
- Media Encryption: None
- Force rport: Yes
- Message Context: **Blank**

Edit Trunk --> pjsip Settings -->Codecs
*g722
*alaw
*g729
*gsm


Outbound Routes

[Edit Novize: Bild gemäß der Forumsregeln auf Vorschau verkleinert
Image reduced to preview as per forum rules]

We use our smartphones and tables as our landline device. We have Acrobits Groundwire installed. We use push notification so that the application only runs when it needs to. To get it to work, we had to allow Acrobits servers to register on the device behalf to our server. We had to forward Acrobits requests to our FreePBX server. we configured Groundwire like we would any Softphone.
:OPNsense:
-**We add a rule for NAT port forward**
*Interface: WAN
*Proto:UDP
*Src Address: all.sipis.acrobits.cz
*Src Port: Any
*Dst Address: WAN Address
* Dst Port: 5060
* Rdr IP: FreePBX ip
* Rdr port: 5060