Configuring the ICE support

When the FortiFone softclient is located behind a Network Address Translator (NAT) or FortiFone softclients are on different networks (without internetwork routing), configure the interactive connectivity establishment (ICE) support to allow the FortiVoice phone system to establish a valid audio path with the FortiFone softclient.

To configure the ICE support, you have the following two options:

• Static mapping: Uses the internal and external IP addresses of the FortiVoice phone system.
• STUN server: Uses the IP address of a Session Traversal Utilities for NAT (STUN) server.

Decide which option you want to configure for ICE support.

To configure the static mapping for ICE support

1. To connect to the FortiVoice CLI, go to Dashboard > Console and click inside the window.
2. Enter the following commands and replace xxx.xxx.xxx.xxx with the internal and external FortiVoice IP addresses used in your deployment:

   config system sip-setting

   set ice-support static-mapping

   config ice-ip-mapping

   edit 1

   set status enable

   set internal-ipaddr xxx.xxx.xxx.xxx

   set external-ipaddr xxx.xxx.xxx.xxx

   next

   end

3. Reload the configuration by entering the following command:

   execute reload voiced

To configure the STUN server for ICE support

1. To connect to the FortiVoice CLI, go to Dashboard > Console and click inside the window.
2. Enter the following commands and replace xxx.xxx.xxx.xxx with the IP address or host name of a Fortinet or third-party STUN server:

   config system sip-setting

   set ice-support stun-server

   set stun-server xxx.xxx.xxx.xxx

   end

3. Reload the configuration by entering the following command:

   execute reload voiced