Fortinet black logo

FortiVoice Cookbook

Configuring the ICE support

Copy Link
Copy Doc ID d1ee36f1-b067-11ec-9fd1-fa163e15d75b:527633
Download PDF

Configuring the ICE support

When the FortiFone softclient is located behind a Network Address Translator (NAT) or FortiFone softclients are on different networks (without internetwork routing), configure the interactive connectivity establishment (ICE) support to allow the FortiVoice phone system to establish a valid audio path with the FortiFone softclient.

To configure the ICE support, you have the following two options:

  • Static mapping: Uses the internal and external IP addresses of the FortiVoice phone system.
  • STUN server: Uses the IP address of a Session Traversal Utilities for NAT (STUN) server.

Decide which option you want to configure for ICE support.

To configure the static mapping for ICE support

  1. To connect to the FortiVoice CLI, go to Dashboard > Console and click inside the window.
  2. Enter the following commands and replace xxx.xxx.xxx.xxx with the internal and external FortiVoice IP addresses used in your deployment:

    config system sip-setting

    set ice-support static-mapping

    config ice-ip-mapping

    edit 1

    set status enable

    set internal-ipaddr xxx.xxx.xxx.xxx

    set external-ipaddr xxx.xxx.xxx.xxx

    next

    end

  3. Reload the configuration by entering the following command:

    execute reload voiced

To configure the STUN server for ICE support

  1. To connect to the FortiVoice CLI, go to Dashboard > Console and click inside the window.
  2. Enter the following commands and replace xxx.xxx.xxx.xxx with the IP address or host name of a Fortinet or third-party STUN server:

    config system sip-setting

    set ice-support stun-server

    set stun-server xxx.xxx.xxx.xxx

    end

  3. Reload the configuration by entering the following command:

    execute reload voiced

Configuring the ICE support

When the FortiFone softclient is located behind a Network Address Translator (NAT) or FortiFone softclients are on different networks (without internetwork routing), configure the interactive connectivity establishment (ICE) support to allow the FortiVoice phone system to establish a valid audio path with the FortiFone softclient.

To configure the ICE support, you have the following two options:

  • Static mapping: Uses the internal and external IP addresses of the FortiVoice phone system.
  • STUN server: Uses the IP address of a Session Traversal Utilities for NAT (STUN) server.

Decide which option you want to configure for ICE support.

To configure the static mapping for ICE support

  1. To connect to the FortiVoice CLI, go to Dashboard > Console and click inside the window.
  2. Enter the following commands and replace xxx.xxx.xxx.xxx with the internal and external FortiVoice IP addresses used in your deployment:

    config system sip-setting

    set ice-support static-mapping

    config ice-ip-mapping

    edit 1

    set status enable

    set internal-ipaddr xxx.xxx.xxx.xxx

    set external-ipaddr xxx.xxx.xxx.xxx

    next

    end

  3. Reload the configuration by entering the following command:

    execute reload voiced

To configure the STUN server for ICE support

  1. To connect to the FortiVoice CLI, go to Dashboard > Console and click inside the window.
  2. Enter the following commands and replace xxx.xxx.xxx.xxx with the IP address or host name of a Fortinet or third-party STUN server:

    config system sip-setting

    set ice-support stun-server

    set stun-server xxx.xxx.xxx.xxx

    end

  3. Reload the configuration by entering the following command:

    execute reload voiced