Fortinet black logo

Configuring administrator and system settings

Copy Link
Copy Doc ID 0545acff-9e01-11eb-b70b-00505692583a:758812
Download PDF

Configuring administrator and system settings

Perform this procedure to configure the following system settings on an FXO gateway:

  • Network interface
  • Static route
  • Administrator accounts, optional
  • System options
  • SIP settings, optional
Note

If you need more details about the configuration of system settings presented in this section, see the Configuring system settings section in the FortiVoice Gateway Administration Guide.

Editing a physical network interface

Perform this procedure to set the IP address, netmask, and administrative access protocols of the FXO gateway.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Network.

    The Network tab displays the following ports:

    Port 1 has a default IP address and netmask set to 192.168.1.99/24.

    Port 2 has a default IP address set to 192.168.2.99/24.

  2. Double-click a network interface that you want to use to set the IP address of the FXO gateway.
  3. In Addressing Mode, Manual, go to IP/Netmask and edit the IP address and netmask of the interface. Make sure that this IP address is outside of the FortiGate DHCP range.
  4. In Advanced Setting, make sure to enable the protocols that you want the network interface to use to accept connections to the FXO gateway.
  5. In Administrative status, make sure that Up is selected for the network interface to be available to receive traffic.
  6. Click OK.

Configuring a static route

Perform this procedure to configure a static route to the router.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Network, and then click the Routing tab.
  2. Click New.
  3. Make sure that Enable is selected.
  4. In Destination IP/Netmask, enter the destination IP address and netmask of packets subject to this static route. To create a default route that matches all destination IP addresses, enter 0.0.0.0/0.
  5. In Interface, select the interface that this route applies to.
  6. In Gateway, enter the IP address of the router.
  7. In Comment, enter any notes for this static route.
  8. Click OK.

Creating an additional administrator account

Optionally, perform this procedure to create an additional administrator account with restricted permissions. By default, the FXO gateway has a single administrator account called admin.

Prerequisite

If you want to create or edit an admin profile, perform this task on the FortiVoice phone system first. For more details about the admin profile, see the Configuring administrator profiles section in the FortiVoice Phone System Administration Guide.

Procedure steps

  1. In the web-based manager of the FortiVoice Gateway, go to System > Administrator.
  2. Click New.
  3. In Administrator, enter the name for this administrator account.

    The name can contain numbers (0-9), uppercase and lowercase letters (A- Z, a- z), hyphens ( - ), and underscores ( _ ). Other special characters and spaces are not allowed.

  4. In Email address, enter the email address of the administrator.
  5. In Admin profile, select the admin profile. This profile determines which functional areas the administrator account can view or affect.
  6. In the New password and Confirm password, enter the password for this account.

    The password can contain any character except spaces.

    Caution

    Do not enter an FXO gateway administrator password that is less than six characters long. For better security, enter a longer password with a complex combination of characters and numbers, and change the password regularly. Failure to provide a strong password can compromise the security of your FXO gateway.

  7. In Trusted hosts, enter the IPv4 or IPv6 address or subnet and netmask from which this administrator can log in.

    For example, if your private network has an IP address of 192.168.1.0 and you want to allow the administrator to log in to the FXO gateway from your private network, enter 192.168.1.0/24.

    If you want the administrator to access the FXO gateway from any IP address, use 0.0.0.0/0.

  8. In Select language, select the language to display in the web-based manager when this administrator logs in.
  9. In Select theme, select the theme to display in the web-based manager when this administrator logs in.
  10. In Description, enter any notes for this account.
  11. Click Create.

Configuring system options

Perform this procedure to set the system idle timeout and administration ports.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Configuration, and then click the Option tab.
  2. In Idle timeout, enter the amount of time in minutes that an administrator can be inactive before the FXO gateway automatically logs out the administrator.
  3. In Administration Ports, specify the TCP ports for the administrative access on all interfaces.

    Default port numbers:

    • HTTP port number: 80
    • HTTPS port number: 443
    • SSH port number: 22
    • TELNET port number: 23
  4. Click Apply.

Configuring SIP settings

Optionally, perform this procedure to configure SIP settings.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Advanced Setting, and then click the SIP tab.
  2. In SIP Transport, enable the ports as required.

    SIP communications commonly uses TCP or UDP port 5060.

    Port 5060 is used for nonencrypted SIP signaling sessions.

    Port 5061 is typically used for SIP sessions encrypted with the TLS protocol.

  3. In RTP Setting, keep the default values.
  4. Click Apply.

    You have completed this procedure.

  5. Go to Upgrading the FXO gateway firmware.

Configuring administrator and system settings

Perform this procedure to configure the following system settings on an FXO gateway:

  • Network interface
  • Static route
  • Administrator accounts, optional
  • System options
  • SIP settings, optional
Note

If you need more details about the configuration of system settings presented in this section, see the Configuring system settings section in the FortiVoice Gateway Administration Guide.

Editing a physical network interface

Perform this procedure to set the IP address, netmask, and administrative access protocols of the FXO gateway.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Network.

    The Network tab displays the following ports:

    Port 1 has a default IP address and netmask set to 192.168.1.99/24.

    Port 2 has a default IP address set to 192.168.2.99/24.

  2. Double-click a network interface that you want to use to set the IP address of the FXO gateway.
  3. In Addressing Mode, Manual, go to IP/Netmask and edit the IP address and netmask of the interface. Make sure that this IP address is outside of the FortiGate DHCP range.
  4. In Advanced Setting, make sure to enable the protocols that you want the network interface to use to accept connections to the FXO gateway.
  5. In Administrative status, make sure that Up is selected for the network interface to be available to receive traffic.
  6. Click OK.

Configuring a static route

Perform this procedure to configure a static route to the router.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Network, and then click the Routing tab.
  2. Click New.
  3. Make sure that Enable is selected.
  4. In Destination IP/Netmask, enter the destination IP address and netmask of packets subject to this static route. To create a default route that matches all destination IP addresses, enter 0.0.0.0/0.
  5. In Interface, select the interface that this route applies to.
  6. In Gateway, enter the IP address of the router.
  7. In Comment, enter any notes for this static route.
  8. Click OK.

Creating an additional administrator account

Optionally, perform this procedure to create an additional administrator account with restricted permissions. By default, the FXO gateway has a single administrator account called admin.

Prerequisite

If you want to create or edit an admin profile, perform this task on the FortiVoice phone system first. For more details about the admin profile, see the Configuring administrator profiles section in the FortiVoice Phone System Administration Guide.

Procedure steps

  1. In the web-based manager of the FortiVoice Gateway, go to System > Administrator.
  2. Click New.
  3. In Administrator, enter the name for this administrator account.

    The name can contain numbers (0-9), uppercase and lowercase letters (A- Z, a- z), hyphens ( - ), and underscores ( _ ). Other special characters and spaces are not allowed.

  4. In Email address, enter the email address of the administrator.
  5. In Admin profile, select the admin profile. This profile determines which functional areas the administrator account can view or affect.
  6. In the New password and Confirm password, enter the password for this account.

    The password can contain any character except spaces.

    Caution

    Do not enter an FXO gateway administrator password that is less than six characters long. For better security, enter a longer password with a complex combination of characters and numbers, and change the password regularly. Failure to provide a strong password can compromise the security of your FXO gateway.

  7. In Trusted hosts, enter the IPv4 or IPv6 address or subnet and netmask from which this administrator can log in.

    For example, if your private network has an IP address of 192.168.1.0 and you want to allow the administrator to log in to the FXO gateway from your private network, enter 192.168.1.0/24.

    If you want the administrator to access the FXO gateway from any IP address, use 0.0.0.0/0.

  8. In Select language, select the language to display in the web-based manager when this administrator logs in.
  9. In Select theme, select the theme to display in the web-based manager when this administrator logs in.
  10. In Description, enter any notes for this account.
  11. Click Create.

Configuring system options

Perform this procedure to set the system idle timeout and administration ports.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Configuration, and then click the Option tab.
  2. In Idle timeout, enter the amount of time in minutes that an administrator can be inactive before the FXO gateway automatically logs out the administrator.
  3. In Administration Ports, specify the TCP ports for the administrative access on all interfaces.

    Default port numbers:

    • HTTP port number: 80
    • HTTPS port number: 443
    • SSH port number: 22
    • TELNET port number: 23
  4. Click Apply.

Configuring SIP settings

Optionally, perform this procedure to configure SIP settings.

  1. In the web-based manager of the FortiVoice Gateway, go to System > Advanced Setting, and then click the SIP tab.
  2. In SIP Transport, enable the ports as required.

    SIP communications commonly uses TCP or UDP port 5060.

    Port 5060 is used for nonencrypted SIP signaling sessions.

    Port 5061 is typically used for SIP sessions encrypted with the TLS protocol.

  3. In RTP Setting, keep the default values.
  4. Click Apply.

    You have completed this procedure.

  5. Go to Upgrading the FXO gateway firmware.