background image

Fortinet products

Introduction

FortiGate Voice Version 4.0 Administration Guide

6

01-400-112851-20100127

http://docs.fortinet.com/

 • 

Feedback

This document includes a comprehensive configuration example that describes how to 
configure a FortiGate Voice-80C to provide VoIP, networking, and UTM services for a 
branch office network. Also included is a configuration reference to the VoIP, PBX, and 
PSTN web-based manager and CLI functionality of the FortiGate Voice-80C.
This chapter contains the following sections:

Fortinet products

Before you begin

How this guide is organized

Registering your Fortinet product

Fortinet products End User License Agreement

Customer service and technical support

Training

Fortinet documentation

Fortinet products

Fortinet's portfolio of security gateways and complementary products offers a powerful 
blend of ASIC-accelerated performance, integrated multi-threat protection, and constantly 
updated, in-depth threat intelligence. This unique combination delivers network, content, 
and application security for enterprises of all sizes, managed service providers, and 
telecommunications carriers, while providing a flexible, scalable path for expansion. For 
more information on the Fortinet product family, go to 

www.fortinet.com/products

Before you begin

This document is intended for administrators, not end users.
This 

FortiGate Voice Administration Guide

 is a supplement to the 

FortiGate Administration 

Guide

 that provides detailed information about the PBX, and PSTN configuration for 

system administrators of a FortiGate Voice unit. It is assumed that you have already 
successfully installed a FortiGate unit by following the instructions in the 

FortiGate Voice-

80C QuickStart Guide

At this stage:
• You have administrative access to the web-based manager and/or CLI.
• The FortiGate Voice unit is integrated into your network.
• The operation mode has been configured.
• The system time, DNS settings, administrator password, and network interfaces have 

been configured.

• Firmware, FortiGuard Antivirus and FortiGuard Antispam updates are completed.
Once that basic installation is complete, you can use this document. 

How this guide is organized

This section of the guide provides a brief provides a chapter-by-chapter summary of this 
guide.
The most recent version of this document is available from the 

FortiGate

 page of the 

Fortinet Technical Documentation

 web site.

Summary of Contents for Voice

Page 1: ...l be releasing new versions with more information and corrections to errors over the next few weeks Contact techdoc fortinet com if you have any comments about this document Visit http support fortinet com to register your FortiGate Voice product By registering you can receive product updates technical support and FortiGuard services ...

Page 2: ... of Fortinet Inc Trademarks Dynamic Threat Prevention System DTPS APSecure FortiASIC FortiBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System FortiGuard FortiGuard Antispam FortiGuard Antivirus FortiGuard Intrusion FortiGuard Web FortiLog FortiAnalyzer FortiManager Fortinet FortiOS FortiPartner FortiProtect FortiReporter FortiResponse FortiShield FortiVoIP and FortiWi...

Page 3: ...mple FortiGate Voice branch office configuration 13 General configuration steps 14 Connecting the FortiGate Voice 80C unit 15 Configuring basic FortiGate Voice 80C network and UTM settings 15 Configuring network settings for the devices on the Internal network 18 Configuring the FortiGate Voice PSTN and PBX settings 18 Configuring the FortiFones on the internal network 22 Adding extensions for use...

Page 4: ... Configuring VoIP providers 34 Configuring voicemail notifications 35 Monitoring calls 35 Logging of PBX activities 36 Viewing log messages 36 FortiGate Voice VoIP PBX and PSTN CLI Reference 37 config pbx dialplan 37 config pbx did 38 config pbx extension 39 config pbx global 40 config pbx ringgrp 41 config pbx smtp 42 config pbx voice menu 43 config pbx voip provider 43 config system pstn 44 conf...

Page 5: ...ncludes Four Foreign eXchange Office FXO interfaces for connected to up to 4 standard public switch telephone network PSTN phone lines Flexible number dial plans Standard VoIP PBX feature set Integrated dial back up modem and optional 3G wireless cards Voicemail Message notification Unified messaging Music on hold Automatic Call Distribution ACD Basic conferencing Statistics and logging Figure 1 F...

Page 6: ...d telecommunications carriers while providing a flexible scalable path for expansion For more information on the Fortinet product family go to www fortinet com products Before you begin This document is intended for administrators not end users This FortiGate Voice Administration Guide is a supplement to the FortiGate Administration Guide that provides detailed information about the PBX and PSTN c...

Page 7: ...r current configuration settings and what to do if the upgrade is unsuccessful Document conventions Fortinet technical documentation uses the conventions described below IP addresses To avoid publication of public IP addresses that belong to Fortinet or any other organization the IP addresses used in Fortinet technical documentation are fictional and follow the documentation guidelines specific to...

Page 8: ...pted by a third party File content HTML HEAD TITLE Firewall Authentication TITLE HEAD BODY H4 You must authenticate to use this service H4 Hyperlink Visit the Fortinet Technical Support web site https support fortinet com Keyboard entry Type a name for the remote VPN peer or client such as Central_Office_1 Navigation Go to VPN IPSEC Auto Key IKE Publication For details see the FortiGate Administra...

Page 9: ...ng to another part of the configuration such as 0 for the first static route xxx_pattern A regular expression or word with wild cards that matches possible variations such as example com to match all email addresses ending in example com xxx_fqdn A fully qualified domain name FQDN such as mail example com xxx_email An email address such as admin mail example com xxx_ipv4 An IPv4 address such as 19...

Page 10: ... dramatically improve the time that it takes to resolve your technical support ticket by providing your configuration file a network diagram and other specific information For a list of required information see the Fortinet Knowledge Base article What does Fortinet Technical Support require in order to best assist the customer Training Fortinet Training Services provides a variety of training prog...

Page 11: ...e Tools and Documentation CD The documentation for your product is available on the Fortinet Tools and Documentation CD shipped with your product The documents on this CD are current at shipping time For the most current versions of Fortinet documentation visit the Fortinet Technical Documentation web site http docs fortinet com Fortinet Knowledge Base The Fortinet Knowledge Base provides addition...

Page 12: ...Fortinet documentation Introduction FortiGate Voice Version 4 0 Administration Guide 12 01 400 112851 20100127 http docs fortinet com Feedback ...

Page 13: ... soft phones in the internal network The branch office phones use numeric extensions beginning with the number 6 and including three more digits Example valid extensions are 6123 6456 and 6899 Extensions for phones behind NAT devices on the internal network Extensions for phones behind NAT devices on a remote network To collect voicemail the branch office phones dial 97 SIP trunking to a VoIP prov...

Page 14: ...d for the FortiGate Voice 80C to accept and process SIP calls This example also describes how to configure the FortiGate Voice 80C as a DHCP server and DNS server for the branch office internal network As a DHCP server the FortiGate Voice 80C can supply network configuration settings for the PCs and FortiFones on the internal network 3 Configure network settings for the PCs on the Internal network...

Page 15: ...net switches to your network as required 3 Use an RJ 45 telephone cable to connect the FortiGate Voice 80C fxo1 port to the branch office PSTN phone line supplied by your local telephone service provider Configuring basic FortiGate Voice 80C network and UTM settings The following procedures describe how to configure a FortiGate Voice 80C to provide basic Internet connectivity network services and ...

Page 16: ...nternal network Use this procedure to add a new DHCP server for the internal network or to change the configuration of the default FortiGateVoice 80C DHCP server The DHCP server will give PCs on the Internal network IP addresses in the range 172 20 120 110 to 172 20 120 210 and set their default gateway and DNS server to the IP address of the FortiGate Voice 80C internal interface 1 Go to System D...

Page 17: ...ge for the status of the update After a few minutes if an update is available the FortiGuard page lists new version information for the FortiGate services and definitions The system dashboard license information widget also displays new dates and version numbers for the FortiGuard definitions Messages are recorded to the event log indicating whether the update was successful or not To configure ba...

Page 18: ...d the extensions that are on the branch office internal network To configure the fxo1 PSTN interface This procedure describes how to configure the FortiGate Voice fxo1 PSTN interface to connect the FortiGate Voice 80C unit to one PSTN phone line If you have more PSTN phone lines you can connect and configure more fxo interfaces 1 Go to System Network PSTN Interface and edit the fxo1 interface 2 Co...

Page 19: ...unit hangs up calls from the PSTN Hang up on Polarity Reversal Select if the PSTN line uses polarity reversal to indicate a call has been hung up Contact your service provider for details Hang up on Busy Tone Select if you want the FortiGate Voice unit to hang up automatically when it receives a busy tone when attempting to dial a number on the PSTN Busy Tone Detection The number of busy tones tha...

Page 20: ...e Voice unit can send email notifications to when PBX users receive a voicemail For example mail example com You can optionally create an email account on the email server for the FortiGate Voice unit Authentication Select if the email server requires authentication User Name Enter a valid username for an account on the email server Password Enter the password for the account on the email sever Na...

Page 21: ...t are on the branch office internal network Use the following steps to add extensions to the FortiGate Voice unit for the IP phones that are to be connected to the internal network You add identifying information to each extension entry The IP phone must be configured with identifying information that matches an entry in the extension list in order to get an extension from the FortiGate Voice unit...

Page 22: ...nsion Usually a person s last name When this extension calls another phone the caller ID displayed on the called phone consists of the extension First Name followed by the Last Name Email The email address of the person assigned to this extension The FortiGate Voice unit sends voicemail notifications for the extension to this email address Password The SIP phone user password for the phone assigne...

Page 23: ...ation is the same whether the phone is behind a NAT device on the internal network or on a remote network 1 Connect to the FortiGate CLI 2 Enter the following command to add extension 6010 The command includes setting nat to yes to enable NAT config pbx extension edit 6010 set first name first_name_str set last name last_name_str set email email_str set secret password_str Active On Display Name T...

Page 24: ...oice unit the Status of the FortiFone changes to Registered If Status does not change to Registered you should verify the Register Name or re enter the Password You should also confirm that the Domain Server and Proxy Server IP addresses are correct To configure the remote FortiGate unit in NAT mode The remote FortiGate unit in NAT mode must be configured to allow SIP sessions between the remote u...

Page 25: ...se the number keys on their phone to spell out the First Name or Last Name of an extension to connect with that extension You can use the following procedure to add a custom welcome message To add a custom welcome message 1 Log into the FortiGate Voice web based manager 2 Go to PBX Extension Extension and select Create New 3 Enter an Extension 4 Set Type to IVR 5 Enter a Password The password shou...

Page 26: ...the First Name or Last Name of an extension to connect with that extension To provide access to the company directory form any extension 1 Log into the FortiGate Voice web based manager 2 Go to PBX Call Voice Menu 3 Select the Edit icon for Key 7 You can select any available key but this example uses 7 4 Set Action to Check Voicemail and select OK Checking voicemail Once users connect to their voi...

Page 27: ...ing of PBX activities Dashboard widgets There are two specific Dashboard widgets that contain valuable information at a glance about the operation of your FortiGate Voice unit and PBX disk usage The following explain these widgets the Unit Operation widget and the System Resources widget Unit operation dashboard widget Go to System Status and view the Unit Operation widget to see the status of the...

Page 28: ...IP interface settings 1 Go to System Network Interface 2 Select the Edit icon in the row of the interface that you want to configure VoIP settings for 3 Select the check box beside SIP Traffic 4 Select OK Configuring PSTN interfaces There are four default PSTN interfaces to use for your PBX configuration These interfaces are specific for PBX configurations To configure a PSTN interface go to Syste...

Page 29: ...ears Administrative Status Status of the PSTN interface A red down arrow indicates that the interface is down a green up arrow indicates that the interface is up PSTN interface configuration settings Basic Options The basic options for the interface Name The name of the PSTN interface Phone Number Enter the phone number that will be associated with that interface Display Name Enter the name that w...

Page 30: ... can choose from SIP Phone IVR or Conference First Name Enter the first name of the person that will be using this extension Last Name Enter the surname of the person that will be using this extension Email Enter the email address of the person that will be using this extension Password Enter the password of that accesses the email address Dial Plan Select the dial plan that will be used with this...

Page 31: ...an be stored in the voicemail inbox before automatically deleting those messages General extension group settings Create New Select to configure an extension group Name The name of the extension group of Members The number of extensions associated with the extension group Ring Strategy The type of ring strategy associated with the extension group Delete icon Select to delete an extension group Edi...

Page 32: ... 15 7 matches single digits 1 5 6 and 7 one or more digits zero or more digits The pattern _9X indicates that any number of digits 0 9 where the first digit is 9 8 Enter the number of the digit to remove from the incoming number in the Strip field 9 In Outgoing select the PSTN interface and or VoIP provider in the Available column list and then use the arrow to move to the Selected column If you n...

Page 33: ...ice menu options for select the Edit icon 3 In the Action drop down list select one of the following General direct inward dialing settings Name The name of the direct inward dialing configuration Incoming The incoming calls that will flow through the PSTN interface Extension The extension that will be used Comments A description about the direct inward dial configuration Delete icon Select to del...

Page 34: ...oicemail duration time If you want to configure an extension range that is not the default range _1XX use the CLI For more information see FortiGate Voice VoIP PBX and PSTN CLI Reference on page 37 To configure PBX system options 1 Go to PBX Config System 2 In the Voicemail Access field enter the access code number that you want employees to use when accessing their voicemail 3 In Max Voicemail Du...

Page 35: ...o be arranged in descending or ascending order using either the From To or Duration columns General VoIP provider settings Name The name of the VoIP provider Server The server of the VoIP provider User Name The user associated with the VoIP provider Authorization User Name The authorized user for the VoIP provider Display User Name The name that displays on the phone s LCD Account Type The type of...

Page 36: ...ilable 3 Select the check box beside PBX event Viewing log messages You can view the PBX activities and events from Log Report Log Access The log messages can be filtered so that you are viewing specific information or you can display them in Raw format Raw format is the format of what a log message actually appears in the log file To view PBX log messages go to Log Report Log Access and then sele...

Page 37: ...rp config pbx smtp config pbx voice menu config pbx voip provider config system pstn config system interface execute pbx execute pbx license diagnose pbx extension list diagnose pbx voip provider list config pbx dialplan Use this command to add a dial plan and add rules to the dial plan A dial plan rule indicates an outgoing destination to send calls to You can add multiple rules to a dial plan Yo...

Page 38: ...dial plan rule to configure No default callthrough fxo1 fxo2 fxo3 fx04 voip_providers Select one or more destinations that the dial plan rule sends outgoing calls to fxo1 fxo2 fxo3 and fx04 are the 4 PSTN interfaces voip_providers are the VoIP providers added to the FortiGate Voice A dial plan rule can send calls to one or more destinations No default dest pattern pattern_str Enter the dial patter...

Page 39: ...xtension fxo1 fxo2 fxo3 and fx04 are the 4 PSTN interfaces voip_providers are the VoIP providers added to the FortiGate Voice No default cid number phone_number Enter the phone number dialed by a caller on the external system No default extension extension_number Enter the FortiGate Voice extension number the call is directed to No default comment comment_string Enter a description if applicable a...

Page 40: ...oicemail inbox No default nat no yes Enter to indicate that the phone is behind a NAT device No default secret user_password Enter the user s password for voicemail No default type conference ivr sip phone Enter the type of extension to configure sip phone to configure a SIP phone extension ivr to add an interactive voice response IVR configuration Use this setting to customize the welcome message...

Page 41: ...attern that must be used for all extensions added to the FortiGate Voice unit If you want to change the extension pattern you have to delete all previously added extensions A pattern always begins with an underscore _ and the pattern can include the following characters X matches numbers 0 9 Z matches numbers 1 9 N matches numbers 2 9 15 7 matches single digits 1 5 6 and 7 one or more digits zero ...

Page 42: ...here they can leave a message No default strategy ring all sequential Control how the extensions in the group are called by the ring group ring all calls all of the extensions in the group at the same time sequential calls the extensions in the group one at a time in the order in which they have been added to the group No default voicemail of extension extension_number Enter the extension number t...

Page 43: ...ser authuser set display name display_name set reigstration interval refresh_interval set account type static dynamic set port port_provider Variables Description Default comment comment_string Enter a description of the voice menu settings if applicable No default config press 0 config press 1 config press 2 config press 3 config press 4 config press 5 config press 6 config press 7 config press 8...

Page 44: ...her a domain name or an IP address No default user user_name Enter the user name for the provider You can enter the phone number registered with this provider instead No default secret password Enter the password associated with the provider No default authuser authuser Enter the authentication user for the account No default display name display_name Enter the name that will be used as the caller...

Page 45: ...s of the port No default user callerid enable disable Enable to catch the caller ID No default cid signalling bell dtmf v23 v23 jp Enter the caller ID protocol The protocol v23 jp is the v23 protocol for Japan No default cid start polarity ring Enter to start transmitting the caller ID No default send callerid after integer Enter a number for the number of rings after that the caller ID began to t...

Page 46: ...view active calls execute pbx active call Call From Call To Duration 6016 6006 00 00 46 execute pbx license Use this command to enter a license key to be able to use the G729 codec for FortiGate Voice calls execute pbx license license_key Variables Description Default edit interface_name Enter the interface that you want to allow SIP traffic on No default voip enable disable Enable the VoIP SIP pr...

Page 47: ...sion Host Dialplan 6052 Unregister company default 6051 Unregister company default 6050 Unregister company default 6022 Unregister company default 6021 6021 172 30 63 34 company default 6020 Unregister company default diagnose pbx voip provider list Use this diagnose command to list the VoIP providers added to the FortiGate Voice unit configuration and display status information for each one diagn...

Page 48: ...diagnose pbx voip provider list FortiGate Voice VoIP PBX and PSTN CLI Reference FortiGate Voice Version 4 0 Administration Guide 48 01 400 112851 20100127 http docs fortinet com Feedback ...

Page 49: ...www fortinet com ...

Page 50: ...www fortinet com ...

Reviews: