API tools faq
paste
Advertisement
Guest User

sip.conf

a guest
Jan 24th, 2013
595
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 76.58 KB | None | 0 0
raw download clone embed print report
  1. ;!
  2. ;! Automatically generated configuration file
  3. ;! Filename: sip.conf (/etc/asterisk/sip.conf)
  4. ;! Generator: Manager
  5. ;! Creation Date: Wed Jan 9 22:18:49 2013
  6. ;!
  7. ;
  8. ; SIP Configuration example for Asterisk
  9. ;
  10. ; Note: Please read the security documentation for Asterisk in order to
  11. ; understand the risks of installing Asterisk with the sample
  12. ; configuration. If your Asterisk is installed on a public
  13. ; IP address connected to the Internet, you will want to learn
  14. ; about the various security settings BEFORE you start
  15. ; Asterisk.
  16. ;
  17. ; Especially note the following settings:
  18. ; - allowguest (default enabled)
  19. ; - permit/deny/acl - IP address filters
  20. ; - contactpermit/contactdeny/contactacl - IP address filters for registrations
  21. ; - context - Which set of services you offer various users
  22. ;
  23. ; SIP dial strings
  24. ;-----------------------------------------------------------
  25. ; In the dialplan (extensions.conf) you can use several
  26. ; syntaxes for dialing SIP devices.
  27. ; SIP/devicename
  28. ; SIP/username@domain (SIP uri)
  29. ; SIP/username[:password[:md5secret[:authname[:transport]]]]@host[:port]
  30. ; SIP/devicename/extension
  31. ; SIP/devicename/extension/IPorHost
  32. ; SIP/username@domain//IPorHost
  33. ;
  34. ;
  35. ; Devicename
  36. ; devicename is defined as a peer in a section below.
  37. ;
  38. ; username@domain
  39. ; Call any SIP user on the Internet
  40. ; (Don't forget to enable DNS SRV records if you want to use this)
  41. ;
  42. ; devicename/extension
  43. ; If you define a SIP proxy as a peer below, you may call
  44. ; SIP/proxyhostname/user or SIP/user@proxyhostname
  45. ; where the proxyhostname is defined in a section below
  46. ; This syntax also works with ATA's with FXO ports
  47. ;
  48. ; SIP/username[:password[:md5secret[:authname]]]@host[:port]
  49. ; This form allows you to specify password or md5secret and authname
  50. ; without altering any authentication data in config.
  51. ; Examples:
  52. ;
  53. ; SIP/*98@mysipproxy
  54. ; SIP/sales:topsecret::account02@domain.com:5062
  55. ; SIP/12345678::bc53f0ba8ceb1ded2b70e05c3f91de4f:myname@192.168.0.1
  56. ;
  57. ; IPorHost
  58. ; The next server for this call regardless of domain/peer
  59. ;
  60. ; All of these dial strings specify the SIP request URI.
  61. ; In addition, you can specify a specific To: header by adding an
  62. ; exclamation mark after the dial string, like
  63. ;
  64. ; SIP/sales@mysipproxy!sales@edvina.net
  65. ;
  66. ; A new feature for 1.8 allows one to specify a host or IP address to use
  67. ; when routing the call. This is typically used in tandem with func_srv if
  68. ; multiple methods of reaching the same domain exist. The host or IP address
  69. ; is specified after the third slash in the dialstring. Examples:
  70. ;
  71. ; SIP/devicename/extension/IPorHost
  72. ; SIP/username@domain//IPorHost
  73. ;
  74. ; CLI Commands
  75. ; -------------------------------------------------------------
  76. ; Useful CLI commands to check peers/users:
  77. ; sip show peers Show all SIP peers (including friends)
  78. ; sip show registry Show status of hosts we register with
  79. ;
  80. ; sip set debug on Show all SIP messages
  81. ;
  82. ; sip reload Reload configuration file
  83. ; sip show settings Show the current channel configuration
  84. ;
  85. ;------- Naming devices ------------------------------------------------------
  86. ;
  87. ; When naming devices, make sure you understand how Asterisk matches calls
  88. ; that come in.
  89. ; 1. Asterisk checks the SIP From: address username and matches against
  90. ; names of devices with type=user
  91. ; The name is the text between square brackets [name]
  92. ; 2. Asterisk checks the From: addres and matches the list of devices
  93. ; with a type=peer
  94. ; 3. Asterisk checks the IP address (and port number) that the INVITE
  95. ; was sent from and matches against any devices with type=peer
  96. ;
  97. ; Don't mix extensions with the names of the devices. Devices need a unique
  98. ; name. The device name is *not* used as phone numbers. Phone numbers are
  99. ; anything you declare as an extension in the dialplan (extensions.conf).
  100. ;
  101. ; When setting up trunks, make sure there's no risk that any From: username
  102. ; (caller ID) will match any of your device names, because then Asterisk
  103. ; might match the wrong device.
  104. ;
  105. ; Note: The parameter "username" is not the username and in most cases is
  106. ; not needed at all. Check below. In later releases, it's renamed
  107. ; to "defaultuser" which is a better name, since it is used in
  108. ; combination with the "defaultip" setting.
  109. ;-----------------------------------------------------------------------------
  110.  
  111. ; ** Old configuration options **
  112. ; The "call-limit" configuation option is considered old is replaced
  113. ; by new functionality. To enable callcounters, you use the new
  114. ; "callcounter" setting (for extension states in queue and subscriptions)
  115. ; You are encouraged to use the dialplan groupcount functionality
  116. ; to enforce call limits instead of using this channel-specific method.
  117. ; You can still set limits per device in sip.conf or in a database by using
  118. ; "setvar" to set variables that can be used in the dialplan for various limits.
  119.  
  120. [general]
  121. accept_outofcall_message=yes
  122. outofcall_message_context=astsms
  123. context = public ; Default context for incoming calls. Defaults to 'default'
  124. ;allowguest=no ; Allow or reject guest calls (default is yes)
  125. ; If your Asterisk is connected to the Internet
  126. ; and you have allowguest=yes
  127. ; you want to check which services you offer everyone
  128. ; out there, by enabling them in the default context (see below).
  129. ;match_auth_username=yes ; if available, match user entry using the
  130. ; 'username' field from the authentication line
  131. ; instead of the From: field.
  132. allowoverlap = no ; Disable overlap dialing support. (Default is yes)
  133. ;allowoverlap=yes ; Enable RFC3578 overlap dialing support.
  134. ; Can use the Incomplete application to collect the
  135. ; needed digits from an ambiguous dialplan match.
  136. ;allowoverlap=dtmf ; Enable overlap dialing support using DTMF delivery
  137. ; methods (inband, RFC2833, SIP INFO) in the early
  138. ; media phase. Uses the Incomplete application to
  139. ; collect the needed digits.
  140. ;allowtransfer=no ; Disable all transfers (unless enabled in peers or users)
  141. ; Default is enabled. The Dial() options 't' and 'T' are not
  142. ; related as to whether SIP transfers are allowed or not.
  143. ;realm=mydomain.tld ; Realm for digest authentication
  144. ; defaults to "asterisk". If you set a system name in
  145. ; asterisk.conf, it defaults to that system name
  146. ; Realms MUST be globally unique according to RFC 3261
  147. ; Set this to your host name or domain name
  148. ;domainsasrealm=no ; Use domains list as realms
  149. ; You can serve multiple Realms specifying several
  150. ; 'domain=...' directives (see below).
  151. ; In this case Realm will be based on request 'From'/'To' header
  152. ; and should match one of domain names.
  153. ; Otherwise default 'realm=...' will be used.
  154. ;recordonfeature=automixmon ; Default feature to use when receiving 'Record: on' header
  155. ; from an INFO message. Defaults to 'automon'. Works with
  156. ; dynamic features. Feature must be usable on requesting
  157. ; channel for it to work. Setting this value to a blank
  158. ; will disable it.
  159. ;recordofffeature=automixmon ; Default feature to use when receiving 'Record: off' header
  160. ; from an INFO message. Defaults to 'automon'. Works with
  161. ; dynamic features. Feature must be usable on requesting
  162. ; channel for it to work. Setting this value to a blank
  163. ; will disable it.
  164.  
  165. ; With the current situation, you can do one of four things:
  166. ; a) Listen on a specific IPv4 address. Example: bindaddr=192.0.2.1
  167. ; b) Listen on a specific IPv6 address. Example: bindaddr=2001:db8::1
  168. ; c) Listen on the IPv4 wildcard. Example: bindaddr=0.0.0.0
  169. ; d) Listen on the IPv4 and IPv6 wildcards. Example: bindaddr=::
  170. ; (You can choose independently for UDP, TCP, and TLS, by specifying different values for
  171. ; "udpbindaddr", "tcpbindaddr", and "tlsbindaddr".)
  172. ; (Note that using bindaddr=:: will show only a single IPv6 socket in netstat.
  173. ; IPv4 is supported at the same time using IPv4-mapped IPv6 addresses.)
  174. ;
  175. ; You may optionally add a port number. (The default is port 5060 for UDP and TCP, 5061
  176. ; for TLS).
  177. ; IPv4 example: bindaddr=0.0.0.0:5062
  178. ; IPv6 example: bindaddr=[::]:5062
  179. ;
  180. ; The address family of the bound UDP address is used to determine how Asterisk performs
  181. ; DNS lookups. In cases a) and c) above, only A records are considered. In case b), only
  182. ; AAAA records are considered. In case d), both A and AAAA records are considered. Note,
  183. ; however, that Asterisk ignores all records except the first one. In case d), when both A
  184. ; and AAAA records are available, either an A or AAAA record will be first, and which one
  185. ; depends on the operating system. On systems using glibc, AAAA records are given
  186. ; priority.
  187.  
  188. udpbindaddr = 0.0.0.0 ; IP address to bind UDP listen socket to (0.0.0.0 binds to all)
  189. ; Optionally add a port number, 192.168.1.1:5062 (default is port 5060)
  190.  
  191. ; When a dialog is started with another SIP endpoint, the other endpoint
  192. ; should include an Allow header telling us what SIP methods the endpoint
  193. ; implements. However, some endpoints either do not include an Allow header
  194. ; or lie about what methods they implement. In the former case, Asterisk
  195. ; makes the assumption that the endpoint supports all known SIP methods.
  196. ; If you know that your SIP endpoint does not provide support for a specific
  197. ; method, then you may provide a comma-separated list of methods that your
  198. ; endpoint does not implement in the disallowed_methods option. Note that
  199. ; if your endpoint is truthful with its Allow header, then there is no need
  200. ; to set this option. This option may be set in the general section or may
  201. ; be set per endpoint. If this option is set both in the general section and
  202. ; in a peer section, then the peer setting completely overrides the general
  203. ; setting (i.e. the result is *not* the union of the two options).
  204. ;
  205. ; Note also that while Asterisk currently will parse an Allow header to learn
  206. ; what methods an endpoint supports, the only actual use for this currently
  207. ; is for determining if Asterisk may send connected line UPDATE requests and
  208. ; MESSAGE requests. Its use may be expanded in the future.
  209. ;
  210. ; disallowed_methods = UPDATE
  211.  
  212. ;
  213. ; Note that the TCP and TLS support for chan_sip is currently considered
  214. ; experimental. Since it is new, all of the related configuration options are
  215. ; subject to change in any release. If they are changed, the changes will
  216. ; be reflected in this sample configuration file, as well as in the UPGRADE.txt file.
  217. ;
  218. tcpenable = no ; Enable server for incoming TCP connections (default is no)
  219. tcpbindaddr = 0.0.0.0 ; IP address for TCP server to bind to (0.0.0.0 binds to all interfaces)
  220. ; Optionally add a port number, 192.168.1.1:5062 (default is port 5060)
  221.  
  222. ;tlsenable=no ; Enable server for incoming TLS (secure) connections (default is no)
  223. ;tlsbindaddr=0.0.0.0 ; IP address for TLS server to bind to (0.0.0.0) binds to all interfaces)
  224. ; Optionally add a port number, 192.168.1.1:5063 (default is port 5061)
  225. ; Remember that the IP address must match the common name (hostname) in the
  226. ; certificate, so you don't want to bind a TLS socket to multiple IP addresses.
  227. ; For details how to construct a certificate for SIP see
  228. ; http://tools.ietf.org/html/draft-ietf-sip-domain-certs
  229.  
  230. ;tcpauthtimeout = 30 ; tcpauthtimeout specifies the maximum number
  231. ; of seconds a client has to authenticate. If
  232. ; the client does not authenticate beofre this
  233. ; timeout expires, the client will be
  234. ; disconnected. (default: 30 seconds)
  235.  
  236. ;tcpauthlimit = 100 ; tcpauthlimit specifies the maximum number of
  237. ; unauthenticated sessions that will be allowed
  238. ; to connect at any given time. (default: 100)
  239.  
  240. transport = udp ; Set the default transports. The order determines the primary default transport.
  241. ; If tcpenable=no and the transport set is tcp, we will fallback to UDP.
  242.  
  243. srvlookup = yes ; Enable DNS SRV lookups on outbound calls
  244. subscribecontext = default
  245. ; Note: Asterisk only uses the first host
  246. ; in SRV records
  247. ; Disabling DNS SRV lookups disables the
  248. ; ability to place SIP calls based on domain
  249. ; names to some other SIP users on the Internet
  250. ; Specifying a port in a SIP peer definition or
  251. ; when dialing outbound calls will supress SRV
  252. ; lookups for that peer or call.
  253.  
  254. ;pedantic=yes ; Enable checking of tags in headers,
  255. ; international character conversions in URIs
  256. ; and multiline formatted headers for strict
  257. ; SIP compatibility (defaults to "yes")
  258.  
  259. ; See https://wiki.asterisk.org/wiki/display/AST/IP+Quality+of+Service for a description of these parameters.
  260. ;tos_sip=cs3 ; Sets TOS for SIP packets.
  261. ;tos_audio=ef ; Sets TOS for RTP audio packets.
  262. ;tos_video=af41 ; Sets TOS for RTP video packets.
  263. ;tos_text=af41 ; Sets TOS for RTP text packets.
  264.  
  265. ;cos_sip=3 ; Sets 802.1p priority for SIP packets.
  266. ;cos_audio=5 ; Sets 802.1p priority for RTP audio packets.
  267. ;cos_video=4 ; Sets 802.1p priority for RTP video packets.
  268. ;cos_text=3 ; Sets 802.1p priority for RTP text packets.
  269.  
  270. ;maxexpiry=3600 ; Maximum allowed time of incoming registrations (seconds)
  271. ;minexpiry=60 ; Minimum length of registrations (default 60)
  272. ;defaultexpiry=120 ; Default length of incoming/outgoing registration
  273. ;submaxexpiry=3600 ; Maximum allowed time of incoming subscriptions (seconds), default: maxexpiry
  274. ;subminexpiry=60 ; Minimum length of subscriptions, default: minexpiry
  275. ;mwiexpiry=3600 ; Expiry time for outgoing MWI subscriptions
  276. ;maxforwards=70 ; Setting for the SIP Max-Forwards: header (loop prevention)
  277. ; Default value is 70
  278. ;qualifyfreq=60 ; Qualification: How often to check for the host to be up in seconds
  279. ; and reported in milliseconds with sip show settings.
  280. ; Set to low value if you use low timeout for NAT of UDP sessions
  281. ; Default: 60
  282. ;qualifygap=100 ; Number of milliseconds between each group of peers being qualified
  283. ; Default: 100
  284. ;qualifypeers=1 ; Number of peers in a group to be qualified at the same time
  285. ; Default: 1
  286. ;keepalive=60 ; Interval at which keepalive packets should be sent to a peer
  287. ; Valid options are yes (60 seconds), no, or the number of seconds.
  288. ; Default: 0
  289. ;notifymimetype=text/plain ; Allow overriding of mime type in MWI NOTIFY
  290. ;buggymwi=no ; Cisco SIP firmware doesn't support the MWI RFC
  291. ; fully. Enable this option to not get error messages
  292. ; when sending MWI to phones with this bug.
  293. ;mwi_from=asterisk ; When sending MWI NOTIFY requests, use this setting in
  294. ; the From: header as the "name" portion. Also fill the
  295. ; "user" portion of the URI in the From: header with this
  296. ; value if no fromuser is set
  297. ; Default: empty
  298. ;vmexten=voicemail ; dialplan extension to reach mailbox sets the
  299. ; Message-Account in the MWI notify message
  300. ; defaults to "asterisk"
  301.  
  302. ; Codec negotiation
  303. ;
  304. ; When Asterisk is receiving a call, the codec will initially be set to the
  305. ; first codec in the allowed codecs defined for the user receiving the call
  306. ; that the caller also indicates that it supports. But, after the caller
  307. ; starts sending RTP, Asterisk will switch to using whatever codec the caller
  308. ; is sending.
  309. ;
  310. ; When Asterisk is placing a call, the codec used will be the first codec in
  311. ; the allowed codecs that the callee indicates that it supports. Asterisk will
  312. ; *not* switch to whatever codec the callee is sending.
  313. ;
  314. ;preferred_codec_only=yes ; Respond to a SIP invite with the single most preferred codec
  315. ; rather than advertising all joint codec capabilities. This
  316. ; limits the other side's codec choice to exactly what we prefer.
  317.  
  318. ;disallow=all ; First disallow all codecs
  319. ;allow=ulaw ; Allow codecs in order of preference
  320. ;allow=ilbc ; see https://wiki.asterisk.org/wiki/display/AST/RTP+Packetization
  321. ; for framing options
  322. ;
  323. ; This option specifies a preference for which music on hold class this channel
  324. ; should listen to when put on hold if the music class has not been set on the
  325. ; channel with Set(CHANNEL(musicclass)=whatever) in the dialplan, and the peer
  326. ; channel putting this one on hold did not suggest a music class.
  327. ;
  328. ; This option may be specified globally, or on a per-user or per-peer basis.
  329. ;
  330. ;mohinterpret=default
  331. ;
  332. ; This option specifies which music on hold class to suggest to the peer channel
  333. ; when this channel places the peer on hold. It may be specified globally or on
  334. ; a per-user or per-peer basis.
  335. ;
  336. ;mohsuggest=default
  337. ;
  338. ;parkinglot=plaza ; Sets the default parking lot for call parking
  339. ; This may also be set for individual users/peers
  340. ; Parkinglots are configured in features.conf
  341. ;language=en ; Default language setting for all users/peers
  342. ; This may also be set for individual users/peers
  343. ;tonezone=se ; Default tonezone for all users/peers
  344. ; This may also be set for individual users/peers
  345.  
  346. ;relaxdtmf=yes ; Relax dtmf handling
  347. ;trustrpid = no ; If Remote-Party-ID should be trusted
  348. ;sendrpid = yes ; If Remote-Party-ID should be sent (defaults to no)
  349. ;sendrpid = rpid ; Use the "Remote-Party-ID" header
  350. ; to send the identity of the remote party
  351. ; This is identical to sendrpid=yes
  352. ;sendrpid = pai ; Use the "P-Asserted-Identity" header
  353. ; to send the identity of the remote party
  354. ;rpid_update = no ; In certain cases, the only method by which a connected line
  355. ; change may be immediately transmitted is with a SIP UPDATE request.
  356. ; If communicating with another Asterisk server, and you wish to be able
  357. ; transmit such UPDATE messages to it, then you must enable this option.
  358. ; Otherwise, we will have to wait until we can send a reinvite to
  359. ; transmit the information.
  360. ;prematuremedia=no ; Some ISDN links send empty media frames before
  361. ; the call is in ringing or progress state. The SIP
  362. ; channel will then send 183 indicating early media
  363. ; which will be empty - thus users get no ring signal.
  364. ; Setting this to "yes" will stop any media before we have
  365. ; call progress (meaning the SIP channel will not send 183 Session
  366. ; Progress for early media). Default is "yes". Also make sure that
  367. ; the SIP peer is configured with progressinband=never.
  368. ;
  369. ; In order for "noanswer" applications to work, you need to run
  370. ; the progress() application in the priority before the app.
  371.  
  372. ;progressinband=never ; If we should generate in-band ringing always
  373. ; use 'never' to never use in-band signalling, even in cases
  374. ; where some buggy devices might not render it
  375. ; Valid values: yes, no, never Default: never
  376. ;useragent=Asterisk PBX ; Allows you to change the user agent string
  377. ; The default user agent string also contains the Asterisk
  378. ; version. If you don't want to expose this, change the
  379. ; useragent string.
  380. ;promiscredir = no ; If yes, allows 302 or REDIR to non-local SIP address
  381. ; Note that promiscredir when redirects are made to the
  382. ; local system will cause loops since Asterisk is incapable
  383. ; of performing a "hairpin" call.
  384. ;usereqphone = no ; If yes, ";user=phone" is added to uri that contains
  385. ; a valid phone number
  386. ;dtmfmode = rfc2833 ; Set default dtmfmode for sending DTMF. Default: rfc2833
  387. ; Other options:
  388. ; info : SIP INFO messages (application/dtmf-relay)
  389. ; shortinfo : SIP INFO messages (application/dtmf)
  390. ; inband : Inband audio (requires 64 kbit codec -alaw, ulaw)
  391. ; auto : Use rfc2833 if offered, inband otherwise
  392.  
  393. ;compactheaders = yes ; send compact sip headers.
  394. ;
  395. ;videosupport=yes ; Turn on support for SIP video. You need to turn this
  396. ; on in this section to get any video support at all.
  397. ; You can turn it off on a per peer basis if the general
  398. ; video support is enabled, but you can't enable it for
  399. ; one peer only without enabling in the general section.
  400. ; If you set videosupport to "always", then RTP ports will
  401. ; always be set up for video, even on clients that don't
  402. ; support it. This assists callfile-derived calls and
  403. ; certain transferred calls to use always use video when
  404. ; available. [yes|NO|always]
  405.  
  406. ;maxcallbitrate=384 ; Maximum bitrate for video calls (default 384 kb/s)
  407. ; Videosupport and maxcallbitrate is settable
  408. ; for peers and users as well
  409. ;callevents=no ; generate manager events when sip ua
  410. ; performs events (e.g. hold)
  411. ;authfailureevents=no ; generate manager "peerstatus" events when peer can't
  412. ; authenticate with Asterisk. Peerstatus will be "rejected".
  413. ;alwaysauthreject = yes ; When an incoming INVITE or REGISTER is to be rejected,
  414. ; for any reason, always reject with an identical response
  415. ; equivalent to valid username and invalid password/hash
  416. ; instead of letting the requester know whether there was
  417. ; a matching user or peer for their request. This reduces
  418. ; the ability of an attacker to scan for valid SIP usernames.
  419. ; This option is set to "yes" by default.
  420.  
  421. ;auth_options_requests = yes ; Enabling this option will authenticate OPTIONS requests just like
  422. ; INVITE requests are. By default this option is disabled.
  423.  
  424. ;accept_outofcall_message = no ; Disable this option to reject all MESSAGE requests outside of a
  425. ; call. By default, this option is enabled. When enabled, MESSAGE
  426. ; requests are passed in to the dialplan.
  427.  
  428. ;outofcall_message_context = messages ; Context all out of dialog msgs are sent to. When this
  429. ; option is not set, the context used during peer matching
  430. ; is used. This option can be defined at both the peer and
  431. ; global level.
  432.  
  433. ;auth_message_requests = yes ; Enabling this option will authenticate MESSAGE requests.
  434. ; By default this option is enabled. However, it can be disabled
  435. ; should an application desire to not load the Asterisk server with
  436. ; doing authentication and implement end to end security in the
  437. ; message body.
  438.  
  439. ;g726nonstandard = yes ; If the peer negotiates G726-32 audio, use AAL2 packing
  440. ; order instead of RFC3551 packing order (this is required
  441. ; for Sipura and Grandstream ATAs, among others). This is
  442. ; contrary to the RFC3551 specification, the peer _should_
  443. ; be negotiating AAL2-G726-32 instead :-(
  444. ;outboundproxy=proxy.provider.domain ; send outbound signaling to this proxy, not directly to the devices
  445. ;outboundproxy=proxy.provider.domain:8080 ; send outbound signaling to this proxy, not directly to the devices
  446. ;outboundproxy=proxy.provider.domain,force ; Send ALL outbound signalling to proxy, ignoring route: headers
  447. ;outboundproxy=tls://proxy.provider.domain ; same as '=proxy.provider.domain' except we try to connect with tls
  448. ;outboundproxy=192.0.2.1 ; IPv4 address literal (default port is 5060)
  449. ;outboundproxy=2001:db8::1 ; IPv6 address literal (default port is 5060)
  450. ;outboundproxy=192.168.0.2.1:5062 ; IPv4 address literal with explicit port
  451. ;outboundproxy=[2001:db8::1]:5062 ; IPv6 address literal with explicit port
  452. ; ; (could also be tcp,udp) - defining transports on the proxy line only
  453. ; ; applies for the global proxy, otherwise use the transport= option
  454. ;matchexternaddrlocally = yes ; Only substitute the externaddr or externhost setting if it matches
  455. ; your localnet setting. Unless you have some sort of strange network
  456. ; setup you will not need to enable this.
  457.  
  458. ;dynamic_exclude_static = yes ; Disallow all dynamic hosts from registering
  459. ; as any IP address used for staticly defined
  460. ; hosts. This helps avoid the configuration
  461. ; error of allowing your users to register at
  462. ; the same address as a SIP provider.
  463.  
  464. ;contactdeny=0.0.0.0/0.0.0.0 ; Use contactpermit and contactdeny to
  465. ;contactpermit=172.16.0.0/255.255.0.0 ; restrict at what IPs your users may
  466. ; register their phones.
  467. ;contactacl=named_acl_example ; Use named ACLs defined in acl.conf
  468.  
  469. ;engine=asterisk ; RTP engine to use when communicating with the device
  470.  
  471. ;
  472. ; If regcontext is specified, Asterisk will dynamically create and destroy a
  473. ; NoOp priority 1 extension for a given peer who registers or unregisters with
  474. ; us and have a "regexten=" configuration item.
  475. ; Multiple contexts may be specified by separating them with '&'. The
  476. ; actual extension is the 'regexten' parameter of the registering peer or its
  477. ; name if 'regexten' is not provided. If more than one context is provided,
  478. ; the context must be specified within regexten by appending the desired
  479. ; context after '@'. More than one regexten may be supplied if they are
  480. ; separated by '&'. Patterns may be used in regexten.
  481. ;
  482. ;regcontext=sipregistrations
  483. ;regextenonqualify=yes ; Default "no"
  484. ; If you have qualify on and the peer becomes unreachable
  485. ; this setting will enforce inactivation of the regexten
  486. ; extension for the peer
  487. ;legacy_useroption_parsing=yes ; Default "no" ; If you have this option enabled and there are semicolons
  488. ; in the user field of a sip URI, the field be truncated
  489. ; at the first semicolon seen. This effectively makes
  490. ; semicolon a non-usable character for peer names, extensions,
  491. ; and maybe other, less tested things. This can be useful
  492. ; for improving compatability with devices that like to use
  493. ; user options for whatever reason. The behavior is similar to
  494. ; how SIP URI's were typically handled in 1.6.2, hence the name.
  495.  
  496. ;send_diversion=no ; Default "yes" ; Asterisk normally sends Diversion headers with certain SIP
  497. ; invites to relay data about forwarded calls. If this option
  498. ; is disabled, Asterisk won't send Diversion headers unless
  499. ; they are added manually.
  500.  
  501. ; The shrinkcallerid function removes '(', ' ', ')', non-trailing '.', and '-' not
  502. ; in square brackets. For example, the caller id value 555.5555 becomes 5555555
  503. ; when this option is enabled. Disabling this option results in no modification
  504. ; of the caller id value, which is necessary when the caller id represents something
  505. ; that must be preserved. This option can only be used in the [general] section.
  506. ; By default this option is on.
  507. ;
  508. ;shrinkcallerid=yes ; on by default
  509.  
  510.  
  511. ;use_q850_reason = no ; Default "no"
  512. ; Set to yes add Reason header and use Reason header if it is available.
  513.  
  514. ; When the Transfer() application sends a REFER SIP message, extra headers specified in
  515. ; the dialplan by way of SIPAddHeader are sent out with that message. 1.8 and earlier did not
  516. ; add the extra headers. To revert to 1.8- behavior, call SIPRemoveHeader with no arguments
  517. ; before calling Transfer() to remove all additional headers from the channel. The setting
  518. ; below is for transitional compatibility only.
  519. ;
  520. ;refer_addheaders=yes ; on by default
  521.  
  522. ;autocreatepeer=no ; Allow any UAC not explicitly defined to register
  523. ; WITHOUT AUTHENTICATION. Enabling this options poses a high
  524. ; potential security risk and should be avoided unless the
  525. ; server is behind a trusted firewall.
  526. ; If set to "yes", then peers created in this fashion
  527. ; are purged during SIP reloads.
  528. ; When set to "persist", the peers created in this fashion
  529. ; are not purged during SIP reloads.
  530.  
  531. ;
  532. ;------------------------ TLS settings ------------------------------------------------------------
  533. ;tlscertfile=</path/to/certificate.pem> ; Certificate file (*.pem format only) to use for TLS connections
  534. ; default is to look for "asterisk.pem" in current directory
  535.  
  536. ;tlsprivatekey=</path/to/private.pem> ; Private key file (*.pem format only) for TLS connections.
  537. ; If no tlsprivatekey is specified, tlscertfile is searched for
  538. ; for both public and private key.
  539.  
  540. ;tlscafile=</path/to/certificate>
  541. ; If the server your connecting to uses a self signed certificate
  542. ; you should have their certificate installed here so the code can
  543. ; verify the authenticity of their certificate.
  544.  
  545. ;tlscapath=</path/to/ca/dir>
  546. ; A directory full of CA certificates. The files must be named with
  547. ; the CA subject name hash value.
  548. ; (see man SSL_CTX_load_verify_locations for more info)
  549.  
  550. ;tlsdontverifyserver=[yes|no]
  551. ; If set to yes, don't verify the servers certificate when acting as
  552. ; a client. If you don't have the server's CA certificate you can
  553. ; set this and it will connect without requiring tlscafile to be set.
  554. ; Default is no.
  555.  
  556. ;tlscipher=<SSL cipher string>
  557. ; A string specifying which SSL ciphers to use or not use
  558. ; A list of valid SSL cipher strings can be found at:
  559. ; http://www.openssl.org/docs/apps/ciphers.html#CIPHER_STRINGS
  560. ;
  561. ;tlsclientmethod=tlsv1 ; values include tlsv1, sslv3, sslv2.
  562. ; Specify protocol for outbound client connections.
  563. ; If left unspecified, the default is sslv2.
  564. ;
  565. ;--------------------------- SIP timers ----------------------------------------------------
  566. ; These timers are used primarily in INVITE transactions.
  567. ; The default for Timer T1 is 500 ms or the measured run-trip time between
  568. ; Asterisk and the device if you have qualify=yes for the device.
  569. ;
  570. ;t1min=100 ; Minimum roundtrip time for messages to monitored hosts
  571. ; Defaults to 100 ms
  572. ;timert1=500 ; Default T1 timer
  573. ; Defaults to 500 ms or the measured round-trip
  574. ; time to a peer (qualify=yes).
  575. ;timerb=32000 ; Call setup timer. If a provisional response is not received
  576. ; in this amount of time, the call will autocongest
  577. ; Defaults to 64*timert1
  578.  
  579. ;--------------------------- RTP timers ----------------------------------------------------
  580. ; These timers are currently used for both audio and video streams. The RTP timeouts
  581. ; are only applied to the audio channel.
  582. ; The settings are settable in the global section as well as per device
  583. ;
  584. ;rtptimeout=60 ; Terminate call if 60 seconds of no RTP or RTCP activity
  585. ; on the audio channel
  586. ; when we're not on hold. This is to be able to hangup
  587. ; a call in the case of a phone disappearing from the net,
  588. ; like a powerloss or grandma tripping over a cable.
  589. ;rtpholdtimeout=300 ; Terminate call if 300 seconds of no RTP or RTCP activity
  590. ; on the audio channel
  591. ; when we're on hold (must be > rtptimeout)
  592. ;rtpkeepalive=<secs> ; Send keepalives in the RTP stream to keep NAT open
  593. ; (default is off - zero)
  594.  
  595. ;--------------------------- SIP Session-Timers (RFC 4028)------------------------------------
  596. ; SIP Session-Timers provide an end-to-end keep-alive mechanism for active SIP sessions.
  597. ; This mechanism can detect and reclaim SIP channels that do not terminate through normal
  598. ; signaling procedures. Session-Timers can be configured globally or at a user/peer level.
  599. ; The operation of Session-Timers is driven by the following configuration parameters:
  600. ;
  601. ; * session-timers - Session-Timers feature operates in the following three modes:
  602. ; originate : Request and run session-timers always
  603. ; accept : Run session-timers only when requested by other UA
  604. ; refuse : Do not run session timers in any case
  605. ; The default mode of operation is 'accept'.
  606. ; * session-expires - Maximum session refresh interval in seconds. Defaults to 1800 secs.
  607. ; * session-minse - Minimum session refresh interval in seconds. Defualts to 90 secs.
  608. ; * session-refresher - The session refresher (uac|uas). Defaults to 'uas'.
  609. ; uac - Default to the caller initially refreshing when possible
  610. ; uas - Default to the callee initially refreshing when possible
  611. ;
  612. ; Note that, due to recommendations in RFC 4028, Asterisk will always honor the other
  613. ; endpoint's preference for who will handle refreshes. Asterisk will never override the
  614. ; preferences of the other endpoint. Doing so could result in Asterisk and the endpoint
  615. ; fighting over who sends the refreshes. This holds true for the initiation of session
  616. ; timers and subsequent re-INVITE requests whether Asterisk is the caller or callee, or
  617. ; whether Asterisk is currently the refresher or not.
  618. ;
  619. ;session-timers=originate
  620. ;session-expires=600
  621. ;session-minse=90
  622. ;session-refresher=uac
  623. ;
  624. ;--------------------------- SIP DEBUGGING ---------------------------------------------------
  625. ;sipdebug = yes ; Turn on SIP debugging by default, from
  626. ; the moment the channel loads this configuration
  627. ;recordhistory=yes ; Record SIP history by default
  628. ; (see sip history / sip no history)
  629. ;dumphistory=yes ; Dump SIP history at end of SIP dialogue
  630. ; SIP history is output to the DEBUG logging channel
  631.  
  632.  
  633. ;--------------------------- STATUS NOTIFICATIONS (SUBSCRIPTIONS) ----------------------------
  634. ; You can subscribe to the status of extensions with a "hint" priority
  635. ; (See extensions.conf.sample for examples)
  636. ; chan_sip support two major formats for notifications: dialog-info and SIMPLE
  637. ;
  638. ; You will get more detailed reports (busy etc) if you have a call counter enabled
  639. ; for a device.
  640. ;
  641. ; If you set the busylevel, we will indicate busy when we have a number of calls that
  642. ; matches the busylevel treshold.
  643. ;
  644. ; For queues, you will need this level of detail in status reporting, regardless
  645. ; if you use SIP subscriptions. Queues and manager use the same internal interface
  646. ; for reading status information.
  647. ;
  648. ; Note: Subscriptions does not work if you have a realtime dialplan and use the
  649. ; realtime switch.
  650. ;
  651. ;allowsubscribe=no ; Disable support for subscriptions. (Default is yes)
  652. ;subscribecontext = default ; Set a specific context for SUBSCRIBE requests
  653. ; Useful to limit subscriptions to local extensions
  654. ; Settable per peer/user also
  655. ;notifyringing = no ; Control whether subscriptions already INUSE get sent
  656. ; RINGING when another call is sent (default: yes)
  657. ;notifyhold = yes ; Notify subscriptions on HOLD state (default: no)
  658. ; Turning on notifyringing and notifyhold will add a lot
  659. ; more database transactions if you are using realtime.
  660. ;notifycid = yes ; Control whether caller ID information is sent along with
  661. ; dialog-info+xml notifications (supported by snom phones).
  662. ; Note that this feature will only work properly when the
  663. ; incoming call is using the same extension and context that
  664. ; is being used as the hint for the called extension. This means
  665. ; that it won't work when using subscribecontext for your sip
  666. ; user or peer (if subscribecontext is different than context).
  667. ; This is also limited to a single caller, meaning that if an
  668. ; extension is ringing because multiple calls are incoming,
  669. ; only one will be used as the source of caller ID. Specify
  670. ; 'ignore-context' to ignore the called context when looking
  671. ; for the caller's channel. The default value is 'no.' Setting
  672. ; notifycid to 'ignore-context' also causes call-pickups attempted
  673. ; via SNOM's NOTIFY mechanism to set the context for the call pickup
  674. ; to PICKUPMARK.
  675. ;callcounter = yes ; Enable call counters on devices. This can be set per
  676. ; device too.
  677.  
  678. ;----------------------------------------- T.38 FAX SUPPORT ----------------------------------
  679. ;
  680. ; This setting is available in the [general] section as well as in device configurations.
  681. ; Setting this to yes enables T.38 FAX (UDPTL) on SIP calls; it defaults to off.
  682. ;
  683. ; t38pt_udptl = yes ; Enables T.38 with FEC error correction.
  684. ; t38pt_udptl = yes,fec ; Enables T.38 with FEC error correction.
  685. ; t38pt_udptl = yes,redundancy ; Enables T.38 with redundancy error correction.
  686. ; t38pt_udptl = yes,none ; Enables T.38 with no error correction.
  687. ;
  688. ; In some cases, T.38 endpoints will provide a T38FaxMaxDatagram value (during T.38 setup) that
  689. ; is based on an incorrect interpretation of the T.38 recommendation, and results in failures
  690. ; because Asterisk does not believe it can send T.38 packets of a reasonable size to that
  691. ; endpoint (Cisco media gateways are one example of this situation). In these cases, during a
  692. ; T.38 call you will see warning messages on the console/in the logs from the Asterisk UDPTL
  693. ; stack complaining about lack of buffer space to send T.38 FAX packets. If this occurs, you
  694. ; can set an override (globally, or on a per-device basis) to make Asterisk ignore the
  695. ; T38FaxMaxDatagram value specified by the other endpoint, and use a configured value instead.
  696. ; This can be done by appending 'maxdatagram=<value>' to the t38pt_udptl configuration option,
  697. ; like this:
  698. ;
  699. ; t38pt_udptl = yes,fec,maxdatagram=400 ; Enables T.38 with FEC error correction and overrides
  700. ; ; the other endpoint's provided value to assume we can
  701. ; ; send 400 byte T.38 FAX packets to it.
  702. ;
  703. ; FAX detection will cause the SIP channel to jump to the 'fax' extension (if it exists)
  704. ; based one or more events being detected. The events that can be detected are an incoming
  705. ; CNG tone or an incoming T.38 re-INVITE request.
  706. ;
  707. ; faxdetect = yes ; Default 'no', 'yes' enables both CNG and T.38 detection
  708. ; faxdetect = cng ; Enables only CNG detection
  709. ; faxdetect = t38 ; Enables only T.38 detection
  710. ;
  711. ;----------------------------------------- OUTBOUND SIP REGISTRATIONS ------------------------
  712. ; Asterisk can register as a SIP user agent to a SIP proxy (provider)
  713. ; Format for the register statement is:
  714. ; register => [peer?][transport://]user[@domain][:secret[:authuser]]@host[:port][/extension][~expiry]
  715. ;
  716. ;
  717. ;
  718. ; domain is either
  719. ; - domain in DNS
  720. ; - host name in DNS
  721. ; - the name of a peer defined below or in realtime
  722. ; The domain is where you register your username, so your SIP uri you are registering to
  723. ; is username@domain
  724. ;
  725. ; If no extension is given, the 's' extension is used. The extension needs to
  726. ; be defined in extensions.conf to be able to accept calls from this SIP proxy
  727. ; (provider).
  728. ;
  729. ; A similar effect can be achieved by adding a "callbackextension" option in a peer section.
  730. ; this is equivalent to having the following line in the general section:
  731. ;
  732. ; register => username:secret@host/callbackextension
  733. ;
  734. ; and more readable because you don't have to write the parameters in two places
  735. ; (note that the "port" is ignored - this is a bug that should be fixed).
  736. ;
  737. ; Note that a register= line doesn't mean that we will match the incoming call in any
  738. ; other way than described above. If you want to control where the call enters your
  739. ; dialplan, which context, you want to define a peer with the hostname of the provider's
  740. ; server. If the provider has multiple servers to place calls to your system, you need
  741. ; a peer for each server.
  742. ;
  743. ; Beginning with Asterisk version 1.6.2, the "user" portion of the register line may
  744. ; contain a port number. Since the logical separator between a host and port number is a
  745. ; ':' character, and this character is already used to separate between the optional "secret"
  746. ; and "authuser" portions of the line, there is a bit of a hoop to jump through if you wish
  747. ; to use a port here. That is, you must explicitly provide a "secret" and "authuser" even if
  748. ; they are blank. See the third example below for an illustration.
  749. ;
  750. ;
  751. ; Examples:
  752. ;
  753. ;register => 1234:password@mysipprovider.com
  754. ;
  755. ; This will pass incoming calls to the 's' extension
  756. ;
  757. ;
  758. ;register => 2345:password@sip_proxy/1234
  759. ;
  760. ; Register 2345 at sip provider 'sip_proxy'. Calls from this provider
  761. ; connect to local extension 1234 in extensions.conf, default context,
  762. ; unless you configure a [sip_proxy] section below, and configure a
  763. ; context.
  764. ; Tip 1: Avoid assigning hostname to a sip.conf section like [provider.com]
  765. ; Tip 2: Use separate inbound and outbound sections for SIP providers
  766. ; (instead of type=friend) if you have calls in both directions
  767. ;
  768. ;register => 3456@mydomain:5082::@mysipprovider.com
  769. ;
  770. ; Note that in this example, the optional authuser and secret portions have
  771. ; been left blank because we have specified a port in the user section
  772. ;
  773. ;register => tls://username:xxxxxx@sip-tls-proxy.example.org
  774. ;
  775. ; The 'transport' part defaults to 'udp' but may also be 'tcp', 'tls', 'ws', or 'wss'.
  776. ; Using 'udp://' explicitly is also useful in case the username part
  777. ; contains a '/' ('user/name').
  778.  
  779. ;registertimeout=20 ; retry registration calls every 20 seconds (default)
  780. ;registerattempts=10 ; Number of registration attempts before we give up
  781. ; 0 = continue forever, hammering the other server
  782. ; until it accepts the registration
  783. ; Default is 0 tries, continue forever
  784.  
  785. ;----------------------------------------- OUTBOUND MWI SUBSCRIPTIONS -------------------------
  786. ; Asterisk can subscribe to receive the MWI from another SIP server and store it locally for retrieval
  787. ; by other phones. At this time, you can only subscribe using UDP as the transport.
  788. ; Format for the mwi register statement is:
  789. ; mwi => user[:secret[:authuser]]@host[:port]/mailbox
  790. ;
  791. ; Examples:
  792. ;mwi => 1234:password@mysipprovider.com/1234
  793. ;mwi => 1234:password@myportprovider.com:6969/1234
  794. ;mwi => 1234:password:authuser@myauthprovider.com/1234
  795. ;mwi => 1234:password:authuser@myauthportprovider.com:6969/1234
  796. ;
  797. ; MWI received will be stored in the 1234 mailbox of the SIP_Remote context. It can be used by other phones by following the below:
  798. ; mailbox=1234@SIP_Remote
  799. ;----------------------------------------- NAT SUPPORT ------------------------
  800. ;
  801. ; WARNING: SIP operation behind a NAT is tricky and you really need
  802. ; to read and understand well the following section.
  803. ;
  804. ; When Asterisk is behind a NAT device, the "local" address (and port) that
  805. ; a socket is bound to has different values when seen from the inside or
  806. ; from the outside of the NATted network. Unfortunately this address must
  807. ; be communicated to the outside (e.g. in SIP and SDP messages), and in
  808. ; order to determine the correct value Asterisk needs to know:
  809. ;
  810. ; + whether it is talking to someone "inside" or "outside" of the NATted network.
  811. ; This is configured by assigning the "localnet" parameter with a list
  812. ; of network addresses that are considered "inside" of the NATted network.
  813. ; IF LOCALNET IS NOT SET, THE EXTERNAL ADDRESS WILL NOT BE SET CORRECTLY.
  814. ; Multiple entries are allowed, e.g. a reasonable set is the following:
  815. ;
  816. ; localnet=192.168.0.0/255.255.0.0 ; RFC 1918 addresses
  817. ; localnet=10.0.0.0/255.0.0.0 ; Also RFC1918
  818. ; localnet=172.16.0.0/12 ; Another RFC1918 with CIDR notation
  819. ; localnet=169.254.0.0/255.255.0.0 ; Zero conf local network
  820. ;
  821. ; + the "externally visible" address and port number to be used when talking
  822. ; to a host outside the NAT. This information is derived by one of the
  823. ; following (mutually exclusive) config file parameters:
  824. ;
  825. ; a. "externaddr = hostname[:port]" specifies a static address[:port] to
  826. ; be used in SIP and SDP messages.
  827. ; The hostname is looked up only once, when [re]loading sip.conf .
  828. ; If a port number is not present, use the port specified in the "udpbindaddr"
  829. ; (which is not guaranteed to work correctly, because a NAT box might remap the
  830. ; port number as well as the address).
  831. ; This approach can be useful if you have a NAT device where you can
  832. ; configure the mapping statically. Examples:
  833. ;
  834. ; externaddr = 12.34.56.78 ; use this address.
  835. ; externaddr = 12.34.56.78:9900 ; use this address and port.
  836. ; externaddr = mynat.my.org:12600 ; Public address of my nat box.
  837. ; externtcpport = 9900 ; The externally mapped tcp port, when Asterisk is behind a static NAT or PAT.
  838. ; ; externtcpport will default to the externaddr or externhost port if either one is set.
  839. ; externtlsport = 12600 ; The externally mapped tls port, when Asterisk is behind a static NAT or PAT.
  840. ; ; externtlsport port will default to the RFC designated port of 5061.
  841. ;
  842. ; b. "externhost = hostname[:port]" is similar to "externaddr" except
  843. ; that the hostname is looked up every "externrefresh" seconds
  844. ; (default 10s). This can be useful when your NAT device lets you choose
  845. ; the port mapping, but the IP address is dynamic.
  846. ; Beware, you might suffer from service disruption when the name server
  847. ; resolution fails. Examples:
  848. ;
  849. ; externhost=foo.dyndns.net ; refreshed periodically
  850. ; externrefresh=180 ; change the refresh interval
  851. ;
  852. ; Note that at the moment all these mechanism work only for the SIP socket.
  853. ; The IP address discovered with externaddr/externhost is reused for
  854. ; media sessions as well, but the port numbers are not remapped so you
  855. ; may still experience problems.
  856. ;
  857. ; NOTE 1: in some cases, NAT boxes will use different port numbers in
  858. ; the internal<->external mapping. In these cases, the "externaddr" and
  859. ; "externhost" might not help you configure addresses properly.
  860. ;
  861. ; NOTE 2: when using "externaddr" or "externhost", the address part is
  862. ; also used as the external address for media sessions. Thus, the port
  863. ; information in the SDP may be wrong!
  864. ;
  865. ; In addition to the above, Asterisk has an additional "nat" parameter to
  866. ; address NAT-related issues in incoming SIP or media sessions.
  867. ; In particular, depending on the 'nat= ' settings described below, Asterisk
  868. ; may override the address/port information specified in the SIP/SDP messages,
  869. ; and use the information (sender address) supplied by the network stack instead.
  870. ; However, this is only useful if the external traffic can reach us.
  871. ; The following settings are allowed (both globally and in individual sections):
  872. ;
  873. ; nat = no ; Do no special NAT handling other than RFC3581
  874. ; nat = force_rport ; Pretend there was an rport parameter even if there wasn't
  875. ; nat = comedia ; Send media to the port Asterisk received it from regardless
  876. ; ; of where the SDP says to send it.
  877. ; nat = auto_force_rport ; Set the force_rport option if Asterisk detects NAT (default)
  878. ; nat = auto_comedia ; Set the comedia option if Asterisk detects NAT
  879. ;
  880. ; The nat settings can be combined. For example, to set both force_rport and comedia
  881. ; one would set nat=force_rport,comedia. If any of the comma-separated options is 'no',
  882. ; Asterisk will ignore any other settings and set nat=no. If one of the "auto" settings
  883. ; is used in conjunction with its non-auto counterpart (nat=comedia,auto_comedia), then
  884. ; the non-auto option will be ignored.
  885. ;
  886. ; The RFC 3581-defined 'rport' parameter allows a client to request that Asterisk send
  887. ; SIP responses to it via the source IP and port from which the request originated
  888. ; instead of the address/port listed in the top-most Via header. This is useful if a
  889. ; client knows that it is behind a NAT and therefore cannot guess from what address/port
  890. ; its request will be sent. Asterisk will always honor the 'rport' parameter if it is
  891. ; sent. The force_rport setting causes Asterisk to always send responses back to the
  892. ; address/port from which it received requests; even if the other side doesn't support
  893. ; adding the 'rport' parameter.
  894. ;
  895. ; 'comedia RTP handling' refers to the technique of sending RTP to the port that the
  896. ; the other endpoint's RTP arrived from, and means 'connection-oriented media'. This is
  897. ; only partially related to RFC 4145 which was referred to as COMEDIA while it was in
  898. ; draft form. This method is used to accomodate endpoints that may be located behind
  899. ; NAT devices, and as such the address/port they tell Asterisk to send RTP packets to
  900. ; for their media streams is not the actual address/port that will be used on the nearer
  901. ; side of the NAT.
  902. ;
  903. ; IT IS IMPORTANT TO NOTE that if the nat setting in the general section differs from
  904. ; the nat setting in a peer definition, then the peer username will be discoverable
  905. ; by outside parties as Asterisk will respond to different ports for defined and
  906. ; undefined peers. For this reason it is recommended to ONLY DEFINE NAT SETTINGS IN THE
  907. ; GENERAL SECTION. Specifically, if nat=force_rport in one section and nat=no in the
  908. ; other, then valid peers with settings differing from those in the general section will
  909. ; be discoverable.
  910. ;
  911. ; In addition to these settings, Asterisk *always* uses 'symmetric RTP' mode as defined by
  912. ; RFC 4961; Asterisk will always send RTP packets from the same port number it expects
  913. ; to receive them on.
  914. ;
  915. ; The IP address used for media (audio, video, and text) in the SDP can also be overridden by using
  916. ; the media_address configuration option. This is only applicable to the general section and
  917. ; can not be set per-user or per-peer.
  918. ;
  919. ; media_address = 172.16.42.1
  920. ;
  921. ; Through the use of the res_stun_monitor module, Asterisk has the ability to detect when the
  922. ; perceived external network address has changed. When the stun_monitor is installed and
  923. ; configured, chan_sip will renew all outbound registrations when the monitor detects any sort
  924. ; of network change has occurred. By default this option is enabled, but only takes effect once
  925. ; res_stun_monitor is configured. If res_stun_monitor is enabled and you wish to not
  926. ; generate all outbound registrations on a network change, use the option below to disable
  927. ; this feature.
  928. ;
  929. ; subscribe_network_change_event = yes ; on by default
  930. ;
  931. ; ICE/STUN/TURN usage can be disabled globally or on a per-peer basis using the icesupport
  932. ; configuration option. When set to yes ICE support is enabled. When set to no it is disabled.
  933. ;
  934. ; icesupport = no
  935.  
  936. ;----------------------------------- MEDIA HANDLING --------------------------------
  937. ; By default, Asterisk tries to re-invite media streams to an optimal path. If there's
  938. ; no reason for Asterisk to stay in the media path, the media will be redirected.
  939. ; This does not really work well in the case where Asterisk is outside and the
  940. ; clients are on the inside of a NAT. In that case, you want to set directmedia=nonat.
  941. ;
  942. ;directmedia=yes ; Asterisk by default tries to redirect the
  943. ; RTP media stream to go directly from
  944. ; the caller to the callee. Some devices do not
  945. ; support this (especially if one of them is behind a NAT).
  946. ; The default setting is YES. If you have all clients
  947. ; behind a NAT, or for some other reason want Asterisk to
  948. ; stay in the audio path, you may want to turn this off.
  949.  
  950. ; This setting also affect direct RTP
  951. ; at call setup (a new feature in 1.4 - setting up the
  952. ; call directly between the endpoints instead of sending
  953. ; a re-INVITE).
  954.  
  955. ; Additionally this option does not disable all reINVITE operations.
  956. ; It only controls Asterisk generating reINVITEs for the specific
  957. ; purpose of setting up a direct media path. If a reINVITE is
  958. ; needed to switch a media stream to inactive (when placed on
  959. ; hold) or to T.38, it will still be done, regardless of this
  960. ; setting. Note that direct T.38 is not supported.
  961.  
  962. ;directmedia=nonat ; An additional option is to allow media path redirection
  963. ; (reinvite) but only when the peer where the media is being
  964. ; sent is known to not be behind a NAT (as the RTP core can
  965. ; determine it based on the apparent IP address the media
  966. ; arrives from).
  967.  
  968. ;directmedia=update ; Yet a third option... use UPDATE for media path redirection,
  969. ; instead of INVITE. This can be combined with 'nonat', as
  970. ; 'directmedia=update,nonat'. It implies 'yes'.
  971.  
  972. ;directmedia=outgoing ; When sending directmedia reinvites, do not send an immediate
  973. ; reinvite on an incoming call leg. This option is useful when
  974. ; peered with another SIP user agent that is known to send
  975. ; immediate direct media reinvites upon call establishment. Setting
  976. ; the option in this situation helps to prevent potential glares.
  977. ; Setting this option implies 'yes'.
  978.  
  979. ;directrtpsetup=yes ; Enable the new experimental direct RTP setup. This sets up
  980. ; the call directly with media peer-2-peer without re-invites.
  981. ; Will not work for video and cases where the callee sends
  982. ; RTP payloads and fmtp headers in the 200 OK that does not match the
  983. ; callers INVITE. This will also fail if directmedia is enabled when
  984. ; the device is actually behind NAT.
  985.  
  986. ;directmediadeny=0.0.0.0/0 ; Use directmediapermit and directmediadeny to restrict
  987. ;directmediapermit=172.16.0.0/16; which peers should be able to pass directmedia to each other
  988. ; (There is no default setting, this is just an example)
  989. ; Use this if some of your phones are on IP addresses that
  990. ; can not reach each other directly. This way you can force
  991. ; RTP to always flow through asterisk in such cases.
  992. ;directmediaacl=acl_example ; Use named ACLs defined in acl.conf
  993.  
  994. ;ignoresdpversion=yes ; By default, Asterisk will honor the session version
  995. ; number in SDP packets and will only modify the SDP
  996. ; session if the version number changes. This option will
  997. ; force asterisk to ignore the SDP session version number
  998. ; and treat all SDP data as new data. This is required
  999. ; for devices that send us non standard SDP packets
  1000. ; (observed with Microsoft OCS). By default this option is
  1001. ; off.
  1002.  
  1003. ;sdpsession=Asterisk PBX ; Allows you to change the SDP session name string, (s=)
  1004. ; Like the useragent parameter, the default user agent string
  1005. ; also contains the Asterisk version.
  1006. ;sdpowner=root ; Allows you to change the username field in the SDP owner string, (o=)
  1007. ; This field MUST NOT contain spaces
  1008. ;encryption=no ; Whether to offer SRTP encrypted media (and only SRTP encrypted media)
  1009. ; on outgoing calls to a peer. Calls will fail with HANGUPCAUSE=58 if
  1010. ; the peer does not support SRTP. Defaults to no.
  1011. ;encryption_taglen=80 ; Set the auth tag length offered in the INVITE either 32/80 default 80
  1012. ;
  1013. ;avpf=yes ; Enable inter-operability with media streams using the AVPF RTP profile.
  1014. ; This will cause all offers and answers to use AVPF (or SAVPF). This
  1015. ; option may be specified at the global or peer scope.
  1016. ;----------------------------------------- REALTIME SUPPORT ------------------------
  1017. ; For additional information on ARA, the Asterisk Realtime Architecture,
  1018. ; please read https://wiki.asterisk.org/wiki/display/AST/Realtime+Database+Configuration
  1019. ;
  1020. ;rtcachefriends=yes ; Cache realtime friends by adding them to the internal list
  1021. ; just like friends added from the config file only on a
  1022. ; as-needed basis? (yes|no)
  1023.  
  1024. ;rtsavesysname=yes ; Save systemname in realtime database at registration
  1025. ; Default= no
  1026.  
  1027. ;rtupdate=yes ; Send registry updates to database using realtime? (yes|no)
  1028. ; If set to yes, when a SIP UA registers successfully, the ip address,
  1029. ; the origination port, the registration period, and the username of
  1030. ; the UA will be set to database via realtime.
  1031. ; If not present, defaults to 'yes'. Note: realtime peers will
  1032. ; probably not function across reloads in the way that you expect, if
  1033. ; you turn this option off.
  1034. ;rtautoclear=yes ; Auto-Expire friends created on the fly on the same schedule
  1035. ; as if it had just registered? (yes|no|<seconds>)
  1036. ; If set to yes, when the registration expires, the friend will
  1037. ; vanish from the configuration until requested again. If set
  1038. ; to an integer, friends expire within this number of seconds
  1039. ; instead of the registration interval.
  1040.  
  1041. ;ignoreregexpire=yes ; Enabling this setting has two functions:
  1042. ;
  1043. ; For non-realtime peers, when their registration expires, the
  1044. ; information will _not_ be removed from memory or the Asterisk database
  1045. ; if you attempt to place a call to the peer, the existing information
  1046. ; will be used in spite of it having expired
  1047. ;
  1048. ; For realtime peers, when the peer is retrieved from realtime storage,
  1049. ; the registration information will be used regardless of whether
  1050. ; it has expired or not; if it expires while the realtime peer
  1051. ; is still in memory (due to caching or other reasons), the
  1052. ; information will not be removed from realtime storage
  1053.  
  1054. ;----------------------------------------- SIP DOMAIN SUPPORT ------------------------
  1055. ; Incoming INVITE and REFER messages can be matched against a list of 'allowed'
  1056. ; domains, each of which can direct the call to a specific context if desired.
  1057. ; By default, all domains are accepted and sent to the default context or the
  1058. ; context associated with the user/peer placing the call.
  1059. ; REGISTER to non-local domains will be automatically denied if a domain
  1060. ; list is configured.
  1061. ;
  1062. ; Domains can be specified using:
  1063. ; domain=<domain>[,<context>]
  1064. ; Examples:
  1065. ; domain=myasterisk.dom
  1066. ; domain=customer.com,customer-context
  1067. ;
  1068. ; In addition, all the 'default' domains associated with a server should be
  1069. ; added if incoming request filtering is desired.
  1070. ; autodomain=yes
  1071. ;
  1072. ; To disallow requests for domains not serviced by this server:
  1073. ; allowexternaldomains=no
  1074.  
  1075. ;domain=mydomain.tld,mydomain-incoming
  1076. ; Add domain and configure incoming context
  1077. ; for external calls to this domain
  1078. ;domain=1.2.3.4 ; Add IP address as local domain
  1079. ; You can have several "domain" settings
  1080. ;allowexternaldomains=no ; Disable INVITE and REFER to non-local domains
  1081. ; Default is yes
  1082. ;autodomain=yes ; Turn this on to have Asterisk add local host
  1083. ; name and local IP to domain list.
  1084.  
  1085. ; fromdomain=mydomain.tld ; When making outbound SIP INVITEs to
  1086. ; non-peers, use your primary domain "identity"
  1087. ; for From: headers instead of just your IP
  1088. ; address. This is to be polite and
  1089. ; it may be a mandatory requirement for some
  1090. ; destinations which do not have a prior
  1091. ; account relationship with your server.
  1092.  
  1093. ;------------------------------ Advice of Charge CONFIGURATION --------------------------
  1094. ; snom_aoc_enabled = yes; ; This options turns on and off support for sending AOC-D and
  1095. ; AOC-E to snom endpoints. This option can be used both in the
  1096. ; peer and global scope. The default for this option is off.
  1097.  
  1098.  
  1099. ;------------------------------ JITTER BUFFER CONFIGURATION --------------------------
  1100. ; jbenable = yes ; Enables the use of a jitterbuffer on the receiving side of a
  1101. ; SIP channel. Defaults to "no". An enabled jitterbuffer will
  1102. ; be used only if the sending side can create and the receiving
  1103. ; side can not accept jitter. The SIP channel can accept jitter,
  1104. ; thus a jitterbuffer on the receive SIP side will be used only
  1105. ; if it is forced and enabled.
  1106.  
  1107. ; jbforce = no ; Forces the use of a jitterbuffer on the receive side of a SIP
  1108. ; channel. Defaults to "no".
  1109.  
  1110. ; jbmaxsize = 200 ; Max length of the jitterbuffer in milliseconds.
  1111.  
  1112. ; jbresyncthreshold = 1000 ; Jump in the frame timestamps over which the jitterbuffer is
  1113. ; resynchronized. Useful to improve the quality of the voice, with
  1114. ; big jumps in/broken timestamps, usually sent from exotic devices
  1115. ; and programs. Defaults to 1000.
  1116.  
  1117. ; jbimpl = fixed ; Jitterbuffer implementation, used on the receiving side of a SIP
  1118. ; channel. Two implementations are currently available - "fixed"
  1119. ; (with size always equals to jbmaxsize) and "adaptive" (with
  1120. ; variable size, actually the new jb of IAX2). Defaults to fixed.
  1121.  
  1122. ; jbtargetextra = 40 ; This option only affects the jb when 'jbimpl = adaptive' is set.
  1123. ; The option represents the number of milliseconds by which the new jitter buffer
  1124. ; will pad its size. the default is 40, so without modification, the new
  1125. ; jitter buffer will set its size to the jitter value plus 40 milliseconds.
  1126. ; increasing this value may help if your network normally has low jitter,
  1127. ; but occasionally has spikes.
  1128.  
  1129. ; jblog = no ; Enables jitterbuffer frame logging. Defaults to "no".
  1130.  
  1131. ;-----------------------------------------------------------------------------------
  1132.  
  1133. [authentication]
  1134. ; Global credentials for outbound calls, i.e. when a proxy challenges your
  1135. ; Asterisk server for authentication. These credentials override
  1136. ; any credentials in peer/register definition if realm is matched.
  1137. ;
  1138. ; This way, Asterisk can authenticate for outbound calls to other
  1139. ; realms. We match realm on the proxy challenge and pick an set of
  1140. ; credentials from this list
  1141. ; Syntax:
  1142. ; auth = <user>:<secret>@<realm>
  1143. ; auth = <user>#<md5secret>@<realm>
  1144. ; Example:
  1145. ;auth=mark:topsecret@digium.com
  1146. ;
  1147. ; You may also add auth= statements to [peer] definitions
  1148. ; Peer auth= override all other authentication settings if we match on realm
  1149.  
  1150. ;------------------------------------------------------------------------------
  1151. ; DEVICE CONFIGURATION
  1152. ;
  1153. ; SIP entities have a 'type' which determines their roles within Asterisk.
  1154. ; * For entities with 'type=peer':
  1155. ; Peers handle both inbound and outbound calls and are matched by ip/port, so for
  1156. ; The case of incoming calls from the peer, the IP address must match in order for
  1157. ; The invitation to work. This means calls made from either direction won't work if
  1158. ; The peer is unregistered while host=dynamic or if the host is otherise not set to
  1159. ; the correct IP of the sender.
  1160. ; * For entities with 'type=user':
  1161. ; Asterisk users handle inbound calls only (meaning they call Asterisk, Asterisk can't
  1162. ; call them) and are matched by their authorization information (authname and secret).
  1163. ; Asterisk doesn't rely on their IP and will accept calls regardless of the host setting
  1164. ; as long as the incoming SIP invite authorizes successfully.
  1165. ; * For entities with 'type=friend':
  1166. ; Asterisk will create the entity as both a friend and a peer. Asterisk will accept
  1167. ; calls from friends like it would for users, requiring only that the authorization
  1168. ; matches rather than the IP address. Since it is also a peer, a friend entity can
  1169. ; be called as long as its IP is known to Asterisk. In the case of host=dynamic,
  1170. ; this means it is necessary for the entity to register before Asterisk can call it.
  1171. ;
  1172. ; Use remotesecret for outbound authentication, and secret for authenticating
  1173. ; inbound requests. For historical reasons, if no remotesecret is supplied for an
  1174. ; outbound registration or call, the secret will be used.
  1175. ;
  1176. ; For device names, we recommend using only a-z, numerics (0-9) and underscore
  1177. ;
  1178. ; For local phones, type=friend works most of the time
  1179. ;
  1180. ; If you have one-way audio, you probably have NAT problems.
  1181. ; If Asterisk is on a public IP, and the phone is inside of a NAT device
  1182. ; you will need to configure nat option for those phones.
  1183. ; Also, turn on qualify=yes to keep the nat session open
  1184. ;
  1185. ; Configuration options available
  1186. ; --------------------
  1187. ; context
  1188. ; callingpres
  1189. ; permit
  1190. ; deny
  1191. ; secret
  1192. ; md5secret
  1193. ; remotesecret
  1194. ; transport
  1195. ; dtmfmode
  1196. ; directmedia
  1197. ; nat
  1198. ; callgroup
  1199. ; pickupgroup
  1200. ; language
  1201. ; allow
  1202. ; disallow
  1203. ; insecure
  1204. ; trustrpid
  1205. ; progressinband
  1206. ; promiscredir
  1207. ; useclientcode
  1208. ; accountcode
  1209. ; setvar
  1210. ; callerid
  1211. ; amaflags
  1212. ; callcounter
  1213. ; busylevel
  1214. ; allowoverlap
  1215. ; allowsubscribe
  1216. ; allowtransfer
  1217. ; ignoresdpversion
  1218. ; subscribecontext
  1219. ; template
  1220. ; videosupport
  1221. ; maxcallbitrate
  1222. ; rfc2833compensate
  1223. ; mailbox
  1224. ; session-timers
  1225. ; session-expires
  1226. ; session-minse
  1227. ; session-refresher
  1228. ; t38pt_usertpsource
  1229. ; regexten
  1230. ; fromdomain
  1231. ; fromuser
  1232. ; host
  1233. ; port
  1234. ; qualify
  1235. ; keepalive
  1236. ; defaultip
  1237. ; defaultuser
  1238. ; rtptimeout
  1239. ; rtpholdtimeout
  1240. ; sendrpid
  1241. ; outboundproxy
  1242. ; rfc2833compensate
  1243. ; callbackextension
  1244. ; registertrying
  1245. ; timert1
  1246. ; timerb
  1247. ; qualifyfreq
  1248. ; t38pt_usertpsource
  1249. ; contactpermit ; Limit what a host may register as (a neat trick
  1250. ; contactdeny ; is to register at the same IP as a SIP provider,
  1251. ; contactacl ; then call oneself, and get redirected to that
  1252. ; ; same location).
  1253. ; directmediapermit
  1254. ; directmediadeny
  1255. ; directmediaacl
  1256. ; unsolicited_mailbox
  1257. ; use_q850_reason
  1258. ; maxforwards
  1259. ; encryption
  1260. ; description ; Used to provide a description of the peer in console output
  1261. ; dtlsenable
  1262. ; dtlsverify
  1263. ; dtlsrekey
  1264. ; dtlscertfile
  1265. ; dtlsprivatekey
  1266. ; dtlscipher
  1267. ; dtlscafile
  1268. ; dtlscapath
  1269. ; dtlssetup
  1270. ;
  1271.  
  1272. ;------------------------------------------------------------------------------
  1273. ; DTLS-SRTP CONFIGURATION
  1274. ;
  1275. ; DTLS-SRTP support is available if the underlying RTP engine in use supports it.
  1276. ;
  1277. ; dtlsenable = yes ; Enable or disable DTLS-SRTP support
  1278. ; dtlsverify = yes ; Verify that the provided peer certificate is valid
  1279. ; dtlsrekey = 60 ; Interval at which to renegotiate the TLS session and rekey the SRTP session
  1280. ; ; If this is not set or the value provided is 0 rekeying will be disabled
  1281. ; dtlscertfile = file ; Path to certificate file to present
  1282. ; dtlsprivatekey = file ; Path to private key for certificate file
  1283. ; dtlscipher = <SSL cipher string> ; Cipher to use for TLS negotiation
  1284. ; ; A list of valid SSL cipher strings can be found at:
  1285. ; ; http://www.openssl.org/docs/apps/ciphers.html#CIPHER_STRINGS
  1286. ; dtlscafile = file ; Path to certificate authority certificate
  1287. ; dtlscapath = path ; Path to a directory containing certificate authority certificates
  1288. ; dtlssetup = actpass ; Whether we are willing to accept connections, connect to the other party, or both.
  1289. ; ; Valid options are active (we want to connect to the other party), passive (we want to
  1290. ; ; accept connections only), and actpass (we will do both). This value will be used in
  1291. ; ; the outgoing SDP when offering and for incoming SDP offers when the remote party sends
  1292. ; ; actpass
  1293.  
  1294. ;[sip_proxy]
  1295. ; For incoming calls only. Example: FWD (Free World Dialup)
  1296. ; We match on IP address of the proxy for incoming calls
  1297. ; since we can not match on username (caller id)
  1298. ;type=peer
  1299. ;context=from-fwd
  1300. ;host=fwd.pulver.com
  1301.  
  1302. ;[sip_proxy-out]
  1303. ;type=peer ; we only want to call out, not be called
  1304. ;remotesecret=guessit ; Our password to their service
  1305. ;defaultuser=yourusername ; Authentication user for outbound proxies
  1306. ;fromuser=yourusername ; Many SIP providers require this!
  1307. ;fromdomain=provider.sip.domain
  1308. ;host=box.provider.com
  1309. ;transport=udp,tcp ; This sets the default transport type to udp for outgoing, and will
  1310. ; ; accept both tcp and udp. The default transport type is only used for
  1311. ; ; outbound messages until a Registration takes place. During the
  1312. ; ; peer Registration the transport type may change to another supported
  1313. ; ; type if the peer requests so.
  1314.  
  1315. ;usereqphone=yes ; This provider requires ";user=phone" on URI
  1316. ;callcounter=yes ; Enable call counter
  1317. ;busylevel=2 ; Signal busy at 2 or more calls
  1318. ;outboundproxy=proxy.provider.domain ; send outbound signaling to this proxy, not directly to the peer
  1319. ;port=80 ; The port number we want to connect to on the remote side
  1320. ; Also used as "defaultport" in combination with "defaultip" settings
  1321.  
  1322. ;--- sample definition for a provider
  1323. ;[provider1]
  1324. ;type=peer
  1325. ;host=sip.provider1.com
  1326. ;fromuser=4015552299 ; how your provider knows you
  1327. ;remotesecret=youwillneverguessit ; The password we use to authenticate to them
  1328. ;secret=gissadetdu ; The password they use to contact us
  1329. ;callbackextension=123 ; Register with this server and require calls coming back to this extension
  1330. ;transport=udp,tcp ; This sets the transport type to udp for outgoing, and will
  1331. ; ; accept both tcp and udp. Default is udp. The first transport
  1332. ; ; listed will always be used for outgoing connections.
  1333. ;unsolicited_mailbox=4015552299 ; If the remote SIP server sends an unsolicited MWI NOTIFY message the new/old
  1334. ; ; message count will be stored in the configured virtual mailbox. It can be used
  1335. ; ; by any device supporting MWI by specifying <configured value>@SIP_Remote as the
  1336. ; ; mailbox.
  1337.  
  1338. ;
  1339. ; Because you might have a large number of similar sections, it is generally
  1340. ; convenient to use templates for the common parameters, and add them
  1341. ; the the various sections. Examples are below, and we can even leave
  1342. ; the templates uncommented as they will not harm:
  1343.  
  1344. [basic-options](!); a template
  1345. dtmfmode = rfc2833
  1346. context = from-office
  1347. type = friend
  1348.  
  1349. [natted-phone](!,basic-options); another template inheriting basic-options
  1350. directmedia = no
  1351. host = dynamic
  1352.  
  1353. [public-phone](!,basic-options); another template inheriting basic-options
  1354. directmedia = yes
  1355.  
  1356. [my-codecs](!); a template for my preferred codecs
  1357. disallow = all
  1358. allow = ilbc
  1359. allow = g729
  1360. allow = gsm
  1361. allow = g723
  1362. allow = ulaw
  1363. ; Or, more simply:
  1364. ;allow=!all,ilbc,g729,gsm,g723,ulaw
  1365.  
  1366. [ulaw-phone](!); and another one for ulaw-only
  1367. disallow = all
  1368. allow = ulaw
  1369. ; Again, more simply:
  1370. ;allow=!all,ulaw
  1371.  
  1372. ; and finally instantiate a few phones
  1373. ;
  1374. ; [2133](natted-phone,my-codecs)
  1375. ; secret = peekaboo
  1376. ; [2134](natted-phone,ulaw-phone)
  1377. ; secret = not_very_secret
  1378. ; [2136](public-phone,ulaw-phone)
  1379. ; secret = not_very_secret_either
  1380. ; ...
  1381. ;
  1382.  
  1383. ; Standard configurations not using templates look like this:
  1384. ;
  1385. ;[grandstream1]
  1386. ;type=friend
  1387. ;context=from-sip ; Where to start in the dialplan when this phone calls
  1388. ;recordonfeature=dynamicfeature1 ; Feature to use when INFO with Record: on is received.
  1389. ;recordofffeature=dynamicfeature2 ; Feature to use when INFO with Record: off is received.
  1390. ;callerid=John Doe <1234> ; Full caller ID, to override the phones config
  1391. ; on incoming calls to Asterisk
  1392. ;description=Courtesy Phone ; Description of the peer. Shown when doing 'sip show peers'.
  1393. ;host=192.168.0.23 ; we have a static but private IP address
  1394. ; No registration allowed
  1395. ;directmedia=yes ; allow RTP voice traffic to bypass Asterisk
  1396. ;dtmfmode=info ; either RFC2833 or INFO for the BudgeTone
  1397. ;call-limit=1 ; permit only 1 outgoing call and 1 incoming call at a time
  1398. ; from the phone to asterisk (deprecated)
  1399. ; 1 for the explicit peer, 1 for the explicit user,
  1400. ; remember that a friend equals 1 peer and 1 user in
  1401. ; memory
  1402. ; There is no combined call counter for a "friend"
  1403. ; so there's currently no way in sip.conf to limit
  1404. ; to one inbound or outbound call per phone. Use
  1405. ; the group counters in the dial plan for that.
  1406. ;
  1407. ;mailbox=1234@default ; mailbox 1234 in voicemail context "default"
  1408. ;disallow=all ; need to disallow=all before we can use allow=
  1409. ;allow=ulaw ; Note: In user sections the order of codecs
  1410. ; listed with allow= does NOT matter!
  1411. ;allow=alaw
  1412. ;allow=g723.1 ; Asterisk only supports g723.1 pass-thru!
  1413. ;allow=g729 ; Pass-thru only unless g729 license obtained
  1414. ;callingpres=allowed_passed_screen ; Set caller ID presentation
  1415. ; See README.callingpres for more information
  1416.  
  1417. ;[xlite1]
  1418. ; Turn off silence suppression in X-Lite ("Transmit Silence"=YES)!
  1419. ; Note that Xlite sends NAT keep-alive packets, so qualify=yes is not needed
  1420. ;type=friend
  1421. ;regexten=1234 ; When they register, create extension 1234
  1422. ;callerid="Jane Smith" <5678>
  1423. ;host=dynamic ; This device needs to register
  1424. ;directmedia=no ; Typically set to NO if behind NAT
  1425. ;disallow=all
  1426. ;allow=gsm ; GSM consumes far less bandwidth than ulaw
  1427. ;allow=ulaw
  1428. ;allow=alaw
  1429. ;mailbox=1234@default,1233@default ; Subscribe to status of multiple mailboxes
  1430. ;registertrying=yes ; Send a 100 Trying when the device registers.
  1431.  
  1432. ;[snom]
  1433. ;type=friend ; Friends place calls and receive calls
  1434. ;context=from-sip ; Context for incoming calls from this user
  1435. ;secret=blah
  1436. ;subscribecontext=localextensions ; Only allow SUBSCRIBE for local extensions
  1437. ;language=de ; Use German prompts for this user
  1438. ;host=dynamic ; This peer register with us
  1439. ;dtmfmode=inband ; Choices are inband, rfc2833, or info
  1440. ;defaultip=192.168.0.59 ; IP used until peer registers
  1441. ;mailbox=1234@context,2345 ; Mailbox(-es) for message waiting indicator
  1442. ;subscribemwi=yes ; Only send notifications if this phone
  1443. ; subscribes for mailbox notification
  1444. ;vmexten=voicemail ; dialplan extension to reach mailbox
  1445. ; sets the Message-Account in the MWI notify message
  1446. ; defaults to global vmexten which defaults to "asterisk"
  1447. ;disallow=all
  1448. ;allow=ulaw ; dtmfmode=inband only works with ulaw or alaw!
  1449.  
  1450.  
  1451. ;[polycom]
  1452. ;type=friend ; Friends place calls and receive calls
  1453. ;context=from-sip ; Context for incoming calls from this user
  1454. ;secret=blahpoly
  1455. ;host=dynamic ; This peer register with us
  1456. ;dtmfmode=rfc2833 ; Choices are inband, rfc2833, or info
  1457. ;defaultuser=polly ; Username to use in INVITE until peer registers
  1458. ;defaultip=192.168.40.123
  1459. ; Normally you do NOT need to set this parameter
  1460. ;disallow=all
  1461. ;allow=ulaw ; dtmfmode=inband only works with ulaw or alaw!
  1462. ;progressinband=no ; Polycom phones don't work properly with "never"
  1463.  
  1464.  
  1465. ;[pingtel]
  1466. ;type=friend
  1467. ;secret=blah
  1468. ;host=dynamic
  1469. ;insecure=port ; Allow matching of peer by IP address without
  1470. ; matching port number
  1471. ;insecure=invite ; Do not require authentication of incoming INVITEs
  1472. ;insecure=port,invite ; (both)
  1473. ;qualify=1000 ; Consider it down if it's 1 second to reply
  1474. ; Helps with NAT session
  1475. ; qualify=yes uses default value
  1476. ;qualifyfreq=60 ; Qualification: How often to check for the
  1477. ; host to be up in seconds
  1478. ; Set to low value if you use low timeout for
  1479. ; NAT of UDP sessions
  1480. ;
  1481. ; Call group and Pickup group should be in the range from 0 to 63
  1482. ;
  1483. ;callgroup=1,3-4 ; We are in caller groups 1,3,4
  1484. ;pickupgroup=1,3-5 ; We can do call pick-p for call group 1,3,4,5
  1485. ;namedcallgroup=engineering,sales,netgroup,protgroup ; We are in named call groups engineering,sales,netgroup,protgroup
  1486. ;namedpickupgroup=sales ; We can do call pick-p for named call group sales
  1487. ;defaultip=192.168.0.60 ; IP address to use if peer has not registered
  1488. ;deny=0.0.0.0/0.0.0.0 ; ACL: Control access to this account based on IP address
  1489. ;permit=192.168.0.60/255.255.255.0
  1490. ;permit=192.168.0.60/24 ; we can also use CIDR notation for subnet masks
  1491. ;permit=2001:db8::/32 ; IPv6 ACLs can be specified if desired. IPv6 ACLs
  1492. ; apply only to IPv6 addresses, and IPv4 ACLs apply
  1493. ; only to IPv4 addresses.
  1494. ;acl=named_acl_example ; Use named ACLs defined in acl.conf
  1495.  
  1496. ;[cisco1]
  1497. ;type=friend
  1498. ;secret=blah
  1499. ;qualify=200 ; Qualify peer is no more than 200ms away
  1500. ;host=dynamic ; This device registers with us
  1501. ;directmedia=no ; Asterisk by default tries to redirect the
  1502. ; RTP media stream (audio) to go directly from
  1503. ; the caller to the callee. Some devices do not
  1504. ; support this (especially if one of them is
  1505. ; behind a NAT).
  1506. ;defaultip=192.168.0.4 ; IP address to use until registration
  1507. ;defaultuser=goran ; Username to use when calling this device before registration
  1508. ; Normally you do NOT need to set this parameter
  1509. ;setvar=CUSTID=5678 ; Channel variable to be set for all calls from or to this device
  1510. ;setvar=ATTENDED_TRANSFER_COMPLETE_SOUND=beep ; This channel variable will
  1511. ; cause the given audio file to
  1512. ; be played upon completion of
  1513. ; an attended transfer.
  1514.  
  1515. ;[pre14-asterisk]
  1516. ;type=friend
  1517. ;secret=digium
  1518. ;host=dynamic
  1519. ;rfc2833compensate=yes ; Compensate for pre-1.4 DTMF transmission from another Asterisk machine.
  1520. ; You must have this turned on or DTMF reception will work improperly.
  1521. ;t38pt_usertpsource=yes ; Use the source IP address of RTP as the destination IP address for UDPTL packets
  1522. ; if the nat option is enabled. If a single RTP packet is received Asterisk will know the
  1523. ; external IP address of the remote device. If port forwarding is done at the client side
  1524. ; then UDPTL will flow to the remote device.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!