Network Configuration

Complete network configuration of the VoIPSUN PBX.

IP Addresses

Network interface settings. Static and dynamic configurations with VLAN and WiFi support (Raspberry Pi 4/5).

Properties — Static IP

• Name — interface name
• Interface — network interface
• MAC address — interface MAC address
• VLAN — VLAN activation
• VLAN number — VLAN identifier
• Type — static or dynamic configuration
• WiFi interface — Raspberry Pi 4/5 only
• Network SSID — WiFi network name
• WiFi key — WiFi network password
• Hidden SSID? — hidden network name
• WiFi country code — country code for WiFi
• IP address — interface IP address
• Netmask — network mask

Properties — Dynamic IP (DHCP)

Same properties as static IP, plus:

• DHCP IPv6 client — IPv6 DHCP client activation
• Hostname — hostname
• Lease time — address lease time
• Vendor — vendor identification

Note

Configuration changes are applied using the “Restart Network” button. The restart also applies to routing — complete both configurations before applying.

Bridge

Creating a bridge interface by merging two network interfaces into one.

• Interface name — bridge name
• IPv6 — IPv6 activation
• Note — informational text
• Interface — selection of interfaces to merge

Routing

Routing rule definitions with source, destination and gateway specification.

• Name — rule name
• Network — destination network (enter “default” for all; supports CIDR, e.g. 192.168.0.0/16)
• Netmask — network mask
• Gateway — router IP address
• Source IP — source IP address
• Interface — network interface

DNS

• Hostname — hostname
• Domain — recommendation: use a real domain or a made-up one, e.g. voipsun.local
• DNS 1 — primary DNS server
• DNS 2 — secondary DNS server
• DNS 3 — tertiary DNS server

Changes are applied using the “Reload” button.

SMTP

• SMTP server — SMTP server address
• Username — username
• Password — login password

Changes are applied using the “Reload” button.

NTP

The NTP server provides accurate time to network devices. The PBX updates from public time servers.

• Active — NTP activation/deactivation
• NTP 1 to NTP 5 — NTP server addresses

Changes are applied using the “Reload” button.

TFTP

File server for auto-configuration of VoIP devices. Can be deactivated if not needed.

• Active — TFTP activation/deactivation
• Files — file list (upload, delete, download)

HTTP Server

Web file server, e.g. for uploading phone firmware.

Folders are created via “New Item”, uploads via “Upload”. File size is limited by the PHP directive.

OpenVPN Client

Connecting the PBX to VPN networks. Multiple simultaneous connections are possible.

• Active — connection activation/deactivation
• Name — connection name
• VPN server — VPN server address
• Port — port (default 1194)
• Type — TAP (layer 2, switch-like) / TUN (layer 3, router-like)
• ca.crt — certificate authority certificate
• client.crt — client certificate
• client.key — client private key
• Note — informational text

Changes are applied using the “Restart VPN” button.

Global DHCP

• Active — DHCP activation/deactivation
• DHCP Relay — DHCP relay address
• Domain — domain name
• DNS 1, DNS 2 — DNS servers
• NTP 1, NTP 2 — NTP servers
• SMTP server — SMTP server
• TFTP server — TFTP server
• Default lease time — default lease time
• Max lease time — maximum lease time
• Note — informational text

DHCP Server

Dynamic IP address assignment with reservations based on MAC addresses.

• Active — activation/deactivation
• Interface — network interface
• Network — network address
• Netmask — network mask
• Broadcast address — broadcast address
• Domain — domain name
• DNS 1, DNS 2 — DNS servers
• NTP 1, NTP 2 — NTP servers
• SMTP server — SMTP server
• TFTP server — TFTP server (no “tftp://” prefix needed)
• Default lease time — default lease time
• Max lease time — maximum lease time
• Default gateway — default gateway
• IP range — start — starting IP address of the range
• IP range — end — ending IP address of the range
• Note — informational text

Changes are applied using the “Restart DHCP” button.

IP Reservations

Open via the ”+” button next to the DHCP server.

• IP address — reserved IP address
• MAC address — device MAC address
• Note — informational text

Assigned IP Addresses

Log

Real-time DHCP log display.

Firewall — INPUT Rules

Firewall settings for filtering incoming communication to the PBX. By default, everything is allowed.

• Active — rule activation/deactivation
• Order — rule order number. The PBX processes from first to last. Example: rule 1 blocks everything, rule 2 allows a specific port/range = only selected ports are allowed.
• IPv6 — for IPv6 addresses; IPv6 support must be enabled
• Source — source address range (single IP, e.g. 192.168.0.50, or range 192.168.0.0/24)
• Destination — destination address range (same format)
• Protocol — ALL, TCP, UDP, ICMP, GRE
• Input interface — input network interface
• Source port — source port
• Destination port — destination port
• Action — ACCEPT (allowed), DROP (dropped), REJECT (rejected)
• Note — informational text

Note

Firewall changes are applied using the “Restart Firewall” button. The restart applies to ALL sections (INPUT, FORWARD, OUTPUT, DNAT, SNAT).

Firewall — GeoIP INPUT Rules

Firewall settings for filtering incoming communication to the PBX using GeoIP address ranges. By default, everything is allowed.

Properties are the same as INPUT rules, without the IPv6 field.

Firewall — FORWARD Rules

Firewall settings for filtering incoming and outgoing communication to and from the PBX. By default, everything is allowed. Used for filtering communication when the PBX also serves as a router.

Properties are the same as INPUT rules, plus:

• Input interface — input network interface
• Output interface — output network interface

Firewall — OUTPUT Rules

Firewall settings for filtering outgoing communication from the PBX. By default, everything is allowed.

Properties are the same as INPUT rules, with Output interface instead of Input interface.

Firewall — GeoIP OUTPUT Rules

Firewall settings for filtering outgoing communication from the PBX based on address ranges assigned to individual countries. By default, everything is allowed.

Firewall — DNAT Rules

Firewall settings for destination address translation. Used, for example, when you need to access a phone inside the local network via the PBX’s public address.

Properties are the same as INPUT rules, plus:

• New destination address — destination translation address
• New destination port — destination translation port

Firewall — SNAT Rules

Firewall settings for source address translation. Used when the PBX is also functioning as a router. Setting up IP masquerade in SNAT rules will route packets from the internal network to the public network.

Properties are the same as OUTPUT rules, plus:

• New source address — enter MASQ for masquerade based on the output interface IP