Mushroom Networks Documentation

How do I configure and use VOIP Armor in firmware version 1.17 and above?

VOIP Armor tunnel is a specialized bonding tunnel that is designed to optimize VOIP traffic. VOIP Armor requires two sides, the VLL Server side and the VOIP Armor client side. The VLL Server side functionality can be achieved either via the “VOIP Armor Cloud Relay Service” that is provided by Mushroom Networks as a subscription service, or you can install your own VOIP Armor Relay device in your own data center.

The client side functionality of VOIP Armor is available either as an add-on module to Truffle, or is also available as the VOIP Armor Unit. Configuring VOIP Armor consists of 2 steps:

Step 1: Setting up the VOIP Armor tunnel between your client unit and the VOIP Armor Relay side.

If you have subscribed to the VOIP Armor Cloud Relay Service, then your server side of the VOIP Armor tunnel is already setup for you. If you have your own VOIP Armor Relay Unit (or Truffle with VOIP Armor Relay), then you will need to configure the VOIP Armor instance for the server side by clicking “add” button for the “VLL + VOIP Armor instances” section under the “VLL” tab.

Click the “Add” button and then choose “VLL Server” from the drop-down menu for the “Type”. Create a login and password (you will need to use the same login and password on the client side). All other parameters should be left as the default values. Click “Apply” to finalize the Server side configuration.

Similarly, to configure your VOIP Armor client side, on your VOIP Armor Unit (or Truffle with VOIP Armor module), go to the user interface of the unit and click on the “VLL” tab. Click on the “add” button for the “VLL + VOIP Armor instances” section. Choose “VLL Client: VOIP Armor” from the dropdown menu for the “Type”. Create a login and password (you will need to use the same login and password that you created previously). Enter the IP address of the VLL Server that you configured earlier. Click “Apply” to finalize the Client side configuration.

The tunnel should now establish by creating the VOIP Armor tunnel between the client and server side. The graph status will be populated under the “VLL + VOIP Armor instances” showing the “up (x of x)” status of the tunnel.

Step 2: Now that you have established the VOIP Armor tunnel, we can create the firewall rules and the manual route rules to allow VOIP/SIP traffic into the tunnel from outside as well as direct VOIP/SIP traffic generated on the LAN side to the VOIP Armor tunnel. To direct your VOIP/SIP traffic on your LAN to the VOIP Armor tunnel, go to the “ADVANCED” tab and click on to “Add” for “Manual Network Routes”. Choose “Simple Route” as type, “vll” for “Devce Type” and enter the name of the tunnel you created earlier for the “Device Index”.

If you know the destination IP addresses of your VOIP / SIP traffic (usually your SIP trunk provider’s or your hosted IP-PBX provider’s IP address) then you can use those IP addresses as the value for the “Destination” section of the configuration. This will route all traffic with that destination IP through the VOIP Armor tunnel.

If you don’t know the “Destination” IP of the VOIP/SIP traffic, then you can identify your VOIP/SIP traffic via the Source IP address. To create a “Manual Network Route” for this, choose the “Advanced Route” as the type (as seen below).

Similarly, choose “vll” as the “Device Type” and enter the name of your tunnel (same name that you created earlier) into the “Device Index”. Enter the source IP address of the VOIP/SIP traffic (e.g. the IP address of your local PBX or voice gateway in your local LAN) into the “Source” section and click “Apply”.

As a final step, you will need to make sure the VOIP/SIP traffic coming inbound to the server side will go through the VOIP Armor tunnel. To do this, you will need to add a “Manual Network Route” at the Server side. Please note that if you have subscribed to the VOIP Armor Cloud Relay service, a Mushroom Networks team member will set this for you for the Cloud instance. If you do have the VOIP Armor Relay unit at the server side location, then click “add” for a “Manual Network Route”:

Choose “Simple Route” as the “Type”, “vll” as the “Device Type” and enter the tunnel name (the same name you created earlier) into the “Device Index” field. Finally, enter the local LAN IP of your phone/PBX/Voice-Gateway that the inbound VOIP/SIP traffic will go to, and click “Apply”.

Your VOIP Armor tunnel setup and the related Manual Routing rules are now all set.

 

© 2004 – 2024 Mushroom Networks Inc. All rights reserved.

Let’s chat. Call us at +1 (858) 452-1031 or fill the form: