Mitel MIVOICE OFFICE 250, Installation And Administration Manual

Page: 465 / 585

Network IP Topology
437
Remote Maintenance and Diagnostics
These protocols provide capabilities to diagnose problems, update software, etc. To enable remote
maintenance and diagnostics over the Internet, enable the ports for DB Programming (TCP port
44000), Web interfaces (TCP port 80), SSH (TCP port 22), and AVDAP Monitor (TCP port 4444).
Near-End NAT/Firewall Traversal
Figure 12 shows a simple customer network with a NAT/firewall between the private network and
the Internet. All SIP and RTP between the SIP peer (in the public network) and the MiVoice Office
250 network goes through this firewall.
The firewall must be SIP-aware for the configuration in Figure 12 on page 437 to work and to use
service provider SIP trunks.
The following are various deployment configurations for the MiVoice Office 250 to communicate with
a SIP trunk service provider in the public network. You can install the MiVoice Office 250:
• Behind a SIP-aware NAT/firewall. The SIP-aware NAT/firewall provides SIP fix-up for SIP traffic
between the MiVoice Office 250 and the SIP trunk service provider network. This configuration
requires the MiVoice Office 250 to register with the SIP peer.
• Behind a corporate enterprise NAT/firewall provided, you create a static mapping on the NAT/fire -
wall. This static mapping must map the public IP address of the MiVoice Office 250 to the private
IP address of the MiVoice Office 250. Also, there must not be any PAT on the NAT/firewall. This
configuration does not require the MiVoice Office 250 to register with SIP peer.
Figure 12: Near-End NAT/Firewall Traversal Network Diagram