It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Phone System

How should I configure the network settings on my Barracuda Phone System?

  • Type: Knowledgebase
  • Date changed: one year ago

Solution #00005364

 

Scope:

The network configuration settings on the Barracuda Phone System are designed to be flexible in order to fit your existing network infrastructure. This solution provides three common configuration types in order to help you decide how to configure your server. This solution assumes that the Barracuda Phone System is already physically installed on your local network, and that you have logged onto the Web UI and completed the First Run Wizard.

 

Answer:

There are three common types of network configurations on the Barracuda Phone System:

  1. Internal configuration on your Local Area Network with port forwarding.
  2. Internal configuration on your Local Area Network with port forwarding and a dedicated trunk for VoIP traffic.
  3. Internal configuration on your Local Area Network with the WAN port configured in a DMZ or outside your Firewall.

Each of these configuration options use a different configuration scenario which demonstrates the various configuration options available.



Option 1 - Internal LAN Configuration with Port Forwarding:
This is the most common configuration, and is usually all that is required for a basic office setup.
  1. If desired, add the Barracuda Phone System's Hostname to your local DNS. Please refer to your DNS server's documentation for instructions on how to accomplish this.
  2. Configure your port forwarding rules as listed in Solution #00004844 - What ports should be open for the Barracuda Phone System?
  3. Log in to the BPS Web Interface and navigate to Configuration > Network.
  4. Check the box which is labeled Behind NAT Router and then click the button next to External IP Address labeled Auto-detect.
  5. Check your Hostname, Domain, and DNS settings to confirm that they are correct.
  6. Click the button labeled Apply Network Settings to finish.

Option 2 - Internal LAN Configuration with Port Forwarding and a Dedicated Trunk for VoIP Traffic:

Some VoIP providers deliver a separate connection to be used for VoIP traffic. They should provide the network configuration information for the WAN Port.
  1. Complete the configuration outlined in Option 1 of this document.
  2. Once you have confirmed that everything is working, check the box labeled Enabled in the WAN Port Section.
  3. Make sure to check the box labeled Use LAN Gateway as Default Gateway.
  4. Enter the IP Addess, Subnet, and Gateway information provided by your SP Provider.
  5. Click Add a Static Route and enter your providers Host IP Address, a subnet of 255.255.255.255, and your Provider's Gateway Address.
  6. If the provider requires their own DNS servers, enter your SIP Provider's primary DNS server in the field for Secondary DNS Server.
  7. Click the button labeled Apply Network Settings to finish.

Option 3 - Internal LAN Configuration with the WAN Port configured in a DMZ or outside the Firewall:

In some configurations, you may not want the Barracuda Phone System to use your internal firewall.
Some examples of this scenario are:
  • Ports required for the BPS are used by other services.
  • Network utilization of the firewall is already high.
  • Your existing firewall utilizes a SIP Application Layer Gateway (ALG) which cannot be disabled.
  • Network policy requires public facing devices to be in a DMZ or outside the Firewall.
Please follow these steps to complete the installation of the WAN port.
  1. Complete the configuration outlined in Option 1 of this document.
  2. Once you have confirmed that everything is working, check the box labeled Enabled, in the WAN Port Section.
  3. Make sure that you DO NOT CHECK the box labeled Use LAN Gateway as Default Gateway.
  4. Enter the IP Address, Subnet, and Gateway information for your WAN Port Connection.
  5. If your WAN Connection is in a DMZ which uses NAT, check the box which is labeled Behind NAT Router, and then click the button next to External IP Address labeled Auto-detect.
  6. Click the button labeled Apply Network Settings.
You now need to configure your WAN port's firewall settings:
  1. Navigate to Configuration -> Security.
  2. The section labeled WAN Firewall Rules will allow you to allow or block specific address. The default is to Allow All. If you want to add specific rules:
    • Click the button to Add a Rule.
    • Enter the IP Address and Subnet Mask, and select either to Allow or Block.
    • Click the button labeled Apply Rules to save settings and apply immediately.
  3. The section labeled WAN Port Blocking is organized by role instead of by port in order to simplify administration. Select Allow for the Services you Intend to use.
  4. Click the button labeled Apply WAN Port Blocking to save and apply these rules immediately.

About Static Routes:

Some network configurations make use of multiple internal gateways in order to route traffic between local subnets without increasing the load on their primary gateway. If this configuration is used, static routes will need to be configured for each of these alternative gateways.


Link to this page:

https://campus.barracuda.com/solution/50160000000IMJLAA4