Configuring administrator and system settings

This section includes the following procedures for the configuration of settings on an FXS gateway:

• Editing a physical network interface
• Configuring a static route
• Creating an additional administrator account (optional)
• Configuring system options
• Configuring SIP settings (optional)

If you need more details about the configuration of system settings presented in this section, see the Configuring system settings section in the FortiVoice Gateway Administration Guide.

Editing a physical network interface

Perform this procedure to set the IP address, netmask, and administrative access protocols of the FXS gateway.

1. In the GUI of the FortiVoice Gateway, go to System > Network.

   The Network tab displays the following ports:

   Port 1 has a default IP address and netmask set to 192.168.1.99/24.

   Port 2 has a default IP address set to 192.168.2.99/24.

2. Double-click a network interface that you want to use to set the IP address of the FXS gateway.
3. In Addressing Mode, Manual, go to IP/Netmask and edit the IP address and netmask of the interface. Make sure that this IP address is outside of the FortiGate DHCP range.
4. In Advanced Setting, make sure to enable the protocols that you want the network interface to use to accept connections to the FXS gateway.
5. In Administrative status, make sure that Up is selected for the network interface to be available to receive traffic.
6. Click OK.

Configuring a static route

Perform this procedure to configure a static route to the router.

1. In the GUI of the FortiVoice Gateway, go to System > Network, and then click the Routing tab.
2. Click New.
3. Make sure that Enable is selected.
4. In Destination IP/Netmask, enter the destination IP address and netmask of packets subject to this static route. To create a default route that matches all destination IP addresses, enter 0.0.0.0/0.
5. In Interface, select the interface that this route applies to.
6. In Gateway, enter the IP address of the router.
7. In Comment, enter any notes for this static route.
8. Click OK.

Creating an additional administrator account

Optionally, perform this procedure to create an additional administrator account with restricted permissions. By default, the FXS gateway has a single administrator account called admin.

Prerequisite

If you want to create or edit an admin profile, perform this task on the FortiVoice phone system first. For more details about the admin profile, see the Configuring administrator profiles section in the FortiVoice Phone System Administration Guide.

Procedure steps

1. In the GUI of the FortiVoice Gateway, go to System > Administrator.
2. Click New.
3. In Administrator, enter the name for this administrator account.

   The name can contain numbers (0-9), uppercase and lowercase letters (A- Z, a- z), hyphens ( - ), and underscores ( _ ). Other special characters and spaces are not allowed.

4. In Email address, enter the email address of the administrator.
5. In Admin profile, select the admin profile. This profile determines which functional areas the administrator account can view or affect.

   Enter an FXS gateway administrator password that is six characters or more. For better security, enter a longer password with a complex combination of characters and numbers, and change the password regularly. Failure to provide a strong password can compromise the security of your FXS gateway.

6. In the New password and Confirm password, enter the password for this account.

   The password can contain any character except spaces.

7. Select a Trusted hosts type:
   • User defined: In Trusted hosts, enter the IPv4 or IPv6 address or subnet and netmask from which this administrator can log in.

     For example, if your private network has an IP address of 192.168.1.0 and you want to allow the administrator to log in to the FXS gateway from your private network, enter 192.168.1.0/24.

     If you want the administrator to access the FXS gateway from any IP address, use 0.0.0.0/0.

   • RFC 1918 predefined: With this choice, the FXS gateway allows connections from any private IP addresses specified by the request for comment 1918 (RFC 1918).
8. In Select language, select the language to display in the GUI when this administrator logs in.
9. In Select theme, select the theme to display in the GUI when this administrator logs in.
10. In Description, enter any notes for this account.
11. Click Create.

Configuring system options

Perform this procedure to set the system idle timeout and administration ports.

1. In the GUI of the FortiVoice Gateway, go to System > Configuration, and then click the Option tab.
2. In Idle timeout, enter the amount of time in minutes that an administrator can be inactive before the FXS gateway automatically logs out the administrator.
3. In Administration Ports, specify the TCP ports for the administrative access on all interfaces.

   Default port numbers:

   • HTTP port number: 80
   • HTTPS port number: 443
   • SSH port number: 22
   • TELNET port number: 23
4. Click Apply.

Configuring SIP settings

Optionally, perform this procedure to configure SIP settings.

1. In the GUI of the FortiVoice Gateway, go to System > Advanced Setting, and then click the SIP tab.
2. In SIP Transport, enable the ports as required.

   SIP communications commonly uses the Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) port 5060.

   Port 5060 is used for nonencrypted SIP signaling sessions.

   Port 5061 is typically used for SIP sessions encrypted with the Transport Layer Security (TLS) protocol.

   Port 8089 typically works for the WebSocket Secure (WSS) protocol.

3. In RTP Setting, keep the default values.
4. Click Apply.

   You have completed this procedure.

5. Go to Upgrading the FXS gateway firmware.