![]() ![]() I suspect a better configuration would be to have each of the two main sites VPN/L2TP to the FreePBX server and then change back to HTTP and Internal Addresses.īut, it doesn’t seem right to have the 10 satelite locations VPN to the PBX server, especially since they already VPN to our AR site gateway. To get this to work, we’ve selected the External Address for Destination and Provision, and we require HTTPS for provisioning and for Phone Apps Protocol. We are currently auto configuring Yealink handsets using the commercial EndPoint Manager. Could be wrong.Įither way, since the FreePBX is cloud hosted is should be obvious that none of the endpoibts are local to it. I’m assuming that means on the LAN segments that will receive broadcast packets during discovery. I sure hope not.Ī lot of the FreePBX documentation speaks about the PBX server being “on the same network”. It’s on my ToDo list to run that down.)Īs I have been becoming more familiar with the FreePBX system, I can see that a number of non-TLS protected channels are enabled, and I am unsure whether our calls are in the clear over the internet. (I think that’s what’s messing with LetsEncrypt, btw. We have also changed the Apache Rewrite rules to redirect http requests to use the https scheme. (I already mentioned the anonymous connection default that I have changed.) I kind of naively assumed that the default FreePBX image provided by Sangoma/FreePBXHosting would be secure. In addition we have about 10 other locations across 5 states with an endpoint at each location. We have 2 main sites, one in AZ and another in AR with about 20 endpoints. (Was quite surprised that wasn’t the default configuration.) ![]() The firewall is configured, and we don’t allow anonymous SIP connections. The Admin Dashboard shows everything green (with the exception of an annoying message about LetsEncrypt). It’s version 12.7.6-1904-1.sng7 according to /etc/schmooze/pbx-version. Is there a “Best Practices” for FreePBX running on cloud servers? ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |