Categories
Asterisk Support Covid-19 FreePBX Knowledge Base Remote Working

Disabling Router SIP ALG

With many companies asking their employees to work from home, a common problem when trying to use a sip phone on a home network is the SIP ‘helper’ or ALG, Here is some advice on how to disable it on the more common routers that you may encounter.

SIP ALG (Application Layer Gateway) modifies VoIP traffic with the aim of solving NAT and firewall related problems. SIP ALG does this by inspecting SIP packets and modifying SIP Header and SDP data.

Unfortunately, SIP ALG was poorly implemented in a lot of cases, which has lead to it causing more issues than it corrects and due to this, we believe that, in general, it is best disabled.

Note – Many routers will re-enable SIP ALG after being powered off and on, or sometimes after a firmware update, therefore if it has been disabled in the past, and you know that the router was recently updated and powered off and on again, then it is always a good idea to log in to the router and double check the setting.

Virgin SuperHub: SIP ALG cannot be disabled in the settings of SuperHubs. Please click here for advice troubleshooting issues with SuperHubs. 

BT: SIP ALG cannot be disabled in the settings of BT HomeHubs, but can be disable with BT Business Hub versions 3 and higher:

Disabling a BT Business Hub 5’s SIP ALG

Fritz!Box: SIP ALG can’t be disabled.

DrayTek routers: Log in to your DrayTek via Telnet using an SSH client such as Putty: http://www.putty.org/

Check if SIP ALG is Enabled or Disabled:

To check if SIP ALG is Enabled or Disabled enter this command: sys sip_alg ?

If SIP ALG is disabled a ” 0 ” result will be returned.  If SIP ALG is enabled the result will be ” 1 “.

Disabling SIP ALG:

To Disable SIP ALG enter the following:

sys sip_alg 0
sys commit
sys reboot

The router will restart and save your changes.

Click here for additional general information about DrayTek Firewall setup. 

TP-Link routers: How to Disable SIP ALG on TP-Link ADSL modem router

Linksys: Check for a ‘SIP ALG’ option, in the ‘Administration’ tab under ‘Advanced’. 

May also need to disable SPI Firewall. 

Microtik: Disable ‘SIP Helper‘. 

Netgear: Look for a ‘SIP ALG’ checkbox in the ‘WAN’ settings.

Port Scan and DoS Protection should also be disabled.

Disable STUN in VoIP phone’s settings. 

D-Link: In your router’s ‘Advanced’ settings –> ‘Application Level Gateway (ALG) Configuration’ uncheck the ‘SIP’ option. 

Huawei: Many routers support SIP ALG (usually found in the ‘Security’ menu). 

SonicWALL Firewall: Under the VoIP tab, the option ‘Enable Consistent NAT’ should be enabled and ‘Enable SIP Transformations’ unchecked.  

Thomson: How to Disable SIP ALG on a Thomson Router HERE

Test with STUN disabled in your VoIP phone’s settings.

Adtran Netvanta: Disable SIP ALG under ‘Firewall/ACLs’ –> ‘ALG Settings’.

For Technicolor TG588V routers see this document for step by step details

Even if there isn’t a SIP ALG option in your router’s settings, it may still be implemented. TelNet commands must be used to disable SIP ALG with TechnicolorThomsonSpeedTouch, some Draytek and some ZyXEL routers. 

Categories
Covid-19

Coronavirus and Covid-19

The sudden spread of Coronavirus means businesses could temporarily close and employees may be asked to work from home.

We want to reassure you and your customers that our communication systems will be running as normal if this scenario were to arise.

We can quickly assist in the deployment of home working solutions for your employees and in the majority of cases your employees will be able to take their handset home and plug it into their home network and carry on working if you are using one of our hosted IPPBXs.

This is a fast moving situation and no one is sure what will happen next. We will do all we can to assist you as we have in the past for our customers, For example during the Ash cloud in 2010 where we had customers with key employees ‘stranded’ in overseas locations.

At this time you the opportunity to get plans in place in a orderly and timely manner, Below is some key actions that you plan can be checked against, Its not everything but it is a start.

The increase in public awareness of the emerging situation in respect of the COVID-19 has been accompanied by a general rise in public health concerns and alarmist headlines; many offering irresponsible assessments of the imminent nature of a crisis. Northcott Global Solutions and Fullerton Health contend that, rather than falling victim to ill-informed panic, clients currently have an opportunity to devise and put in place planning strategies that will help them minimise the potential impact to their staff and operations.
As widely reported COVID-19 is a virus that mutated, enabling human-to-human transmission to occur. Intra-country and inter-county spread are likely to occur quickly. Similarities have been made to the SARS outbreak in 2003 although current mortality trends are lower. At the time of the preparation of this brief there are no planning estimates regarding infectivity and there is anecdotal reporting of 2% mortality of those infected.
The experience from the Severe Acute Respiratory Syndrome (SARS) gives some insight into what might be expected if the Coronavirus develops into a pandemic:

– School and day care centres were closed, or strict health protocols enforced;
– Staff absenteeism was in excess of 30% (Comment: for companies that have juniors (e.g. supermarkets) in their workforce it can be assumed that absenteeism will be even greater);
– An increased demand on shopping centres;
– Distribution centres and the organisations servicing them were assessed as being the most critical parts of the infrastructure; and
– Companies with an integrated business continuity framework were more able to adapt.

Initial BCP Planning Actions Required that you may wish to consider
 – Develop/consolidate existing material and deploy training/guidance for:
– General hygiene including hand cleansing and respiratory etiquette,
– Sanitation and disinfection protocols,
– What to do if you or a staff member develop respiratory and fever like symptoms.
– What to do if your family members develop fever and flu like symptoms.
– Access restrictions to offices and the conduct of meetings in the event a pandemic occurs,
– Food handling and preparation, and
– What families can do to be prepared.
 – Identify core activities and how they may be sustained for 4 – 12 weeks whilst in a pandemic cycle (based on historical data assume absenteeism could be as high as 30%).
 – Identify the critical dependencies on third parties and review their preparation.
 – Identify how to re-organise workplaces to minimise human to human spread
 – Utilise the current crisis management team and emergency management teams’ structure for overseeing the response to a pandemic. Rehearse the response to a WHO Phase 6 scenario.
 – Review current business continuity processes including:
– Crisis plans, disaster recovery, denial of access, loss of production;
– Alternative management options (virtual, offshore, maintaining a reserve); and
– Travel policy. Monitor travel advisories and issued by FHA-A, WHO and the Centre for Disease Control (CDC).
 – Develop a monitoring strategy and identify the triggers for activation of management contingencies focused on the scaling back or cessation of operations. Be prepared to go through some false alarms.
 – Review third party relationships and assess their contingencies with essential contractors and suppliers.
 – Establish a staff communications strategy that is clear, with the aim being to have a “trusted, reliable and timely communication program in place” should there be a change to WHO alert levels.
 – Plan for disruptions to critical services and identify the potential points of failure.
 – Identify the HR responses to the reaction to high levels of absenteeism e.g. provision for increases in statutory provisions for sick or carer’s leave.
 – Consider establishing a supply of:
– Protective masks or respirators;
– Disposable gloves;
– Hand sanitiser; and
– Alcohol surface wipes.
 – People – categorise them into three broad areas:
   – Essential – required at office (e.g. IT maintainers, treasury);
   – Essential – can work remotely (connectivity required);
   – Non-essential – can be stood down (for up to two weeks) if required; and
– Assessment should include coverage, single points of failure, decision-making capability and autonomy.

We would advise you to go to one of our customers websites https://www.northcottglobalsolutions.com/latest-news/ for upto date information and advice and assistance for your staff members travelling overseas.

Categories
Asterisk Support FreePBX Knowledge Base Support Technical

Backing up files in FreePBX 15

The first time you come to restore your FREEpbx 15 system you may find that not everything that you expected is there !

The new backup module backs up on a module by module base and not like before where is was DBs and Files.

Linked here is a repository that has the files to create a module that can be edited to backup directories.

https://bitbucket.org/cybercottage/filebackup

The file you need to edit is Backup.php

<?php

namespace FreePBX\modules\Filebackup;
use FreePBX\modules\Backup as Base;

class Backup extends Base\BackupBase
{
    public function runBackup($id, $transaction)
    {
        $this->addDirectories([
            '/etc/asterisk','/tftpboot',
        ]);
        $files = glob("/etc/asterisk/*conf");
        foreach ($files as $file) {
            $path = pathinfo($file, PATHINFO_DIRNAME);
            $this->addFile(basename($file), $path, '', "conf");
    }
    $files = glob("/tftpboot/*xml");
        foreach ($files as $file) {
            $path = pathinfo($file, PATHINFO_DIRNAME);
            $this->addFile(basename($file), $path, '', "conf");
        }
        return $this;
    }
}

As you see we are backing up /etc/asterisk and /tftpboot , But only *.conf files in /etc/asterisk and only *.xml files in /tftpboot

Details on the new backup system are here https://wiki.freepbx.org/display/FOP/Implementing+Backup

Thanks to James Finstrom for the original version of this, This version is not to replace his work but only to give an example of working with Multiple directories

The downloaded zip file needs to be added as a Local module via Module Admin and enabled, It will obviously give a signing error but this can be disabled in Advanced settings or ignored ;-)

Enjoy but don’t blame me if it doesn’t work. Ive tested it on my systems and all seems good by your experience may be different

Categories
Blog Gateways Services

ISDN Switchoff…

With the end of ISDN looming, the switch off could affect over two million businesses in the UK which will come at a cost for those affected. For many, the cost implications to replace their entire Telphone system would simply be too much, but with Sangoma’s offering, the transition from PSTN and ISDN to VoIP can provide a long-term, cost-effective solution.

Why remove a PBX that gives you everything you need? Sangoma’s Vega Gateways provide seamless connectivity to SIP providers, with no need to change any existing hardware or to re-cable your system, these gateways are designed to migrate from PSTN to SIP with minimal downtime.

Available in a range of varieties, Sangoma Vega Gateways suit businesses of all sizes from the SME to enterprise corporations. What’s more, users can benefit from advanced functionalities such as least cost routing (selecting the cheapest route for a call) and enhanced network proxy features which can help with the failover of calls from VoIP to PSTN in the event of a loss of internet connection.

If you would like more information or advice on what is the best option for your business please call or email us. Unlike many we have ISDN simulators so that we can configure your new gateway and install it with limited disruption to your business

Categories
Blog Handsets Products Special Offers

The Gigaset N670 IP PRO grows with the company

LAUNCH OFFER ! SINGLE BASE INC VAT AND DELIVERY FOR £130

Professional IP DECT base station that can become a multi-cell system

N670

The new Gigaset N670 IP PRO offers business customers performance and maximum flexibility to deal with future growth. It supports 20 users, SIP accounts and handsets, can handle eight simultaneous calls, thus enabling a broad range of uses for DECT telephony in the business arena. The base station is compatible with numerous on-premise and cloud-based telephone systems and supports all handsets from Gigaset’s Professional series. If a company’s requirements increase, for example, because it needs more extensions or its floor space expands, the N670 IP PRO can be upgraded in the future with a license to a multi-cell system1).

Modern DECT communication solutions deliver complete freedom of movement in challenging work environments, need minimum cabling, and are easy to install and maintain. As Europe’s DECT pioneer, Gigaset not only makes cordless phones for millions of households worldwide, but also professional telephone systems at its Bocholt site in North Rhine-Westphalia, Germany. The N670 IP PRO DECT base station delivers greater performance and simplifies administration. The device merely needs an Ethernet port for connectivity and supplying power, and the handsets require just one socket for the charging station – everything else works without cables.

“The N670 IP PRO embodies all the expertise we’ve amassed with professional IP DECT systems over the past years,” says Norbert Cremer, Head of Product Management Business Solutions at Gigaset. “We wanted to create an even better, more flexible and more powerful IP DECT base station, one offering the customary ease of installation, great convenience and comprehensive security. Yet the real highlight for our customers is that they can expand it into a multi-cell system with a license upgrade1).” Gigaset is positioning the N670 IP PRO between the N510 IP PRO and the N870 IP PRO multi-cell system.

From the single-cell to the multi-cell system

The N670 IP PRO is an investment in the future: If the floor space or number of users at an organization increases, the N670 IP can be expanded into a multi-cell system with an upgrade license1). Additional base stations cover multiple stories or buildings and ensure users can be reached everywhere. That makes the N670 IP PRO interesting for growing and aspiring companies in particular.

Current datasheet is here and with an RRP or £119.99+Vat this is a great alternative to the N510, Contact us for special launch pricing and Bundle packages.

Categories
Conference Phone Products Special Offers

Snom C520 Conference Set

Thanks to advanced DECT and Bluetooth technology, the C520 is the perfect device for team conferencing and offers three cutting-edge microphones. The first of these is built into the high-performance full-duplex speaker in the main base station with two further wireless DECT microphones that can be freely placed or carried in the room as required.

Snom C520

The C520 microphones use dynamic noise reduction and adaptive feedback control to provide crystal clear HD audio transmission, even in crowded or spacious rooms. The microphones synchronize with the base station in real-time according to their location. This technology allows the user freedom of movement without even having to raise their voice – regardless of meeting room size.

Connectivity is now one of the most important factors for effective collaboration. This is why the C520 features a versatile Bluetooth interface allowing smartphones or DECT phones to be easily paired and used.

To extend the C520 conference system across even larger areas, simply couple wireless C52 loudspeaker units to the base unit and the range of the loudspeakers and microphones will be increased greatly.

A compact device at an Special introcutory price of £225 +Vat and Delivery

Categories
FreePBX Knowledge Base

FreePBX EPM Whoopsing

We have seen on some installations of FreePBX with EPM that when you upload a photo it Whoops when trying to rebulid the config.

The clue to whats happening is that it cant call function imagecreatefromjpeg or imagecreatefrompng depending on your file format

The most common cause of this is php-gd isnt installed. To Check this is simple, create a simple PHP file in the web root called phpcheck.php add the following to it:

phpcheck.php

<?php
if (extension_loaded('gd') && function_exists('gd_info')) {
    echo "PHP GD library is installed on your web server";
}
else {
    echo "PHP GD library is NOT installed on your web server";
}
?>
<?php phpinfo(); ?>

Now browse in your favourite browser to this and it will show at the top if gd is installed or not.

If its not and php was installed via yum then :

yum search php-gd
Loaded plugins: fastestmirror, security
Loading mirror speeds from cached hostfile
 * base: mirrors.clouvider.net
 * extras: mirrors.clouvider.net
 * updates: mirror.sov.uk.goscomb.net
=============================================================== N/S Matched: php-gd ================================================================
php-gd.x86_64 : A module for PHP applications for using the gd graphics library

Will show if its avalible. (your version of PHP may mean this is different for you) then to install yum install php-gd and restart the httpd service

You should now be able to go to phpcheck.php again and it should show as installed. if it does you are good to go installing screen images for phones

Categories
Asterisk Support FreePBX Knowledge Base Support Technical

Resetting root password on FreePBX 14 and other Centos 7 servers

Boot your system and wait until the GRUB menu appears. On some systems you may need to press the “Escape” key to access the GRUB menu. FreePBX should show this for a few seconds on Boot

Highlight your Operating System and then press “e” to edit. You have to be quick here simpler to just press e when the menu appears and you will see similar to below.

Find the line beginning with linux. In this example the line begins linux16.

Manually delete the entries quiet and rhgb from the line. then append the following statement to the end of the line init=/bin/sh Don’t worry if your command is spread across more than one line. A continuation character “\ will be inserted automatically.

Now reboot your system now using the options specified by pressing the keys Ctrl +X

Once the system has re-booted, you will be presented with a shell prompt without having to enter any user name or password.

At this command prompt you will need to enter the following commands:

Remount the “/” root filesystem in Read/Write mode: mount -o remount,rw /

Issue the passwd command to reset the root account password: passwd

Then enter the new password as prompted twice

Then remount the “/” root filesystem in Read Only mode: mount -o remount,ro /

You can now restart the system and login with your new password.

Categories
Handsets Products

Gigaset N870IP DECT

The Gigaset N870 Multicell System is an innovative breakthrough solution that combines DECT base stations and a DECT manager to create a highly scalable yet reliable solution for organisations that need guaranteed mobile communication across sites of any shape or size. Each DECT multicell system supports up to 250 handsets and 60 simultaneous calls making it ideal for small and medium organisations.

For those companies which go beyond the SMB level, widen the network with multiple DECT multicell systems up to the level of an Enterprise, where seamless handover and roaming is applicable in and between all zones. With seamless connectivity with leading IP based on-premise and cloud telephony services, HD audio quality, seamless handover and roaming, the Gigaset N870 Multicell System provides complete coverage across even the most challenging sites. Simple deployment with absolute reliability is key.

The Gigaset N870 IP PRO DECT system offers the latest innovative breakthrough in DECT technology. Combining DECT base stations and a DECT manager in one, the N870 removes the need to purchase a seperate DECT manager, making it a more economical solution.

Offering a highly scalable solution each N870 multicell system supports up to 250 handsets and 10 simultaneous calls per base station, ideal for growing businesses. What’s more, users can rest assured that with continuous connectivity, HD audio quality, seamless call handover and roaming, the N870 DECT solution provides complete coverage across even the most challenging sites.

Compatible with all recent Gigaset pro DECT handsets, the N870 solution can be designed to suit each individual application and its users.

Features

  • Seamless in call handover
  • HD audio quality
  • Each DECT multicell system supports:
    • Up to 250 users/SIP accounts/handsets
    • Up to 60 base stations
    • Up to 10 simultaneous calls per base
  • With the Gigaset Integrator (virtual machine) you can combine up to 100 DECT multicell systems to one large handover and roaming domain
  • LEDs on front for status and visual power check
  • Professional zero-touch configuration via auto-provisioning
  • Compatible handsets include:
  • PoE (PSU available to purchase separately)
  • Wall or ceiling mountable

RRP for each Base station is £395.00 please contact us direct for solution pricing.

Full Fact Sheet.

Categories
Conference Phone Handsets Products

CP920 Conference Phone

Yealink designs its audio conferencing solutions to suit a range of different meeting environments. The CP960 and the CP920 address today’s audio conferencing challenges and unify a clear-and-easy conferencing communication experience for both in-room and remote participants. The CP960 targets mid-to-large-sized meetings while the CP920 covers small-to-mid-sized meetings.

Enterprise-grade and performance-oriented, Yealink conference phones deliver best-in-class HD audio quality for everyone in a meeting to keep pace with the team’s collaboration and contribute inspired work.

Featuring 20-foot 360-degree dead-zone-free voice pickup, the coverage area of the CP920 adapts to multiple room environments and provides a full sound experience.

Yealink’s Noise Proof Technology frees business voice collaboration from annoying noise and optimizes conference efficiency by minimizing distractions. The Yealink Noise Proof technology includes two interrelated functions:
· During a conference, Noise Proof reduces constant background noise from sources such as typing, air conditioners, etc.; and
· When a person is not speaking, Noise Proof automatically mutes the mic(s) until the sound of a human voice is detected.

Stylish and professional, Yealink conference phones adopt a Y-shaped metallic sliver body design. For users who prefer a traditional key system, the CP920 offers a familiar touchable keypad for less stress and more comfort.
One-touch quick meeting starts and no interruption to the ongoing conversation make the CP920 incredibly user-friendly. 

The CP960 and CP920 enable the Hybrid UC Meeting for extraordinary convenience. With Bluetooth and USB connectivity, you can easily pair the conference phone with a PC or mobile phone. Join or create a conference by simply merging the calls.

Price includes UK PSU £350.00