For baseline needs, see Minimum Network Requirements.
For locations where device security is a concern, we encourage phones be given their own sequestered network (VLAN and Subnet), located behind a firewall and/or NAT, and have zero inbound ports configured. It is preferred, to ensure phones are able to react to upstream changes via DNS, that they be allowed to talk to the internet largely unfettered. But we are aware that in some environments, such freedom isn't possible.
Security rules should allow the following outbound connections from each phone:
RTC Voice Cloud (Required for SIP Communication)
Direction | Destination(s) | Protocol | Port(s) | Purpose |
|---|---|---|---|---|
Outbound |
| TCP/UDP | 5080 | SIP Signaling |
Outbound |
| UDP | 20000-32000 | RTP Media (Audio) Streams |
Outbound |
| TCP | 9002 | PC Softphone Websocket |
Outbound | 66.85.81.3 | UDP | 5060 | SIP Signaling |
Outbound | 66.85.81.3 | UDP | 20000-40000 | RTP Media (Audio) Streams |
Outbound |
| TCP | 443 | Phone Provisioning |
Yealink YMCS Phone Manager (Required for ZTP and Orchestration)
Direction | Destination | Protocol | Port(s) | Purpose |
|---|---|---|---|---|
Outbound |
| TCP | 443 | YMCS web portal, device routing, resource/API access |
Outbound |
| TCP | 8110 | Device Management (DM) protocol |
Outbound |
| TCP | 443 | Firmware update checks |
Outbound |
| TCP | 443, 5061 | Redirection Provisioning Service (RPS) — zero-touch provisioning |
Outbound |
| TCP/UDP | 9701 |
|
Outbound |
| TCP | 9713–9724 | |
Outbound |
| TCP/UDP | 9725-9736 |
Receiving Configuration Updates
Receiving Software Updates
Receiving Calls
Initiating Calls