User`s guide

Allworx Server Administrator’s Guide Version 7.6
1-866-ALLWORX * 585-421-3850 Page 25
www.allworx.com
Revised: 11/22/13
5 Configuring the Network
5.1 General Network Configuration
Requirements
If connecting remote phones or remote Px Expanders to the system, observe the
following very important security requirements:
• The Allworx Server Administrator can directly connect the Allworx server to the
Internet via its WAN port. However, the WAN cannot be in Use PPPoE mode.
• Install the server behind a firewall or connect it to the public Internet using the
WAN port. DO NOT connect the Allworx LAN port directly onto the public
Internet.
• Disable Allworx WAN services (ports) not in use.
• Change voicemail ports (SMTP and IMAP) to non-standard port numbers.
• Change all server admin, phone admin, and user passwords from the default
values.
• Use strong passwords for server and phone administration pages. DO NOT use
simple passwords such as “1234” or “Allworx”.
• Verify that there is no exposure of the Admin Page (Port 8080) to the Public
network. DO NOT port forward directly to the LAN port of an Allworx server from
the customer’s router. For remote maintenance, use the Allworx VPN. Navigate
to Home > Network > VPN > modify to configure the VPN settings.
When configuring the WAN interface to connect to the public Internet:
Enable the server in NAT Firewall mode, preferably with Stealth DMZ. In stealth mode,
the WAN interface does not respond to “pings” from other devices.
The Allworx server provides powerful and flexible network infrastructure capability by
setting the Network Mode parameter on the Network > Configuration page. This page
Note:
Allworx cannot guarantee proper operation of third-party networking products. However,
Allworx expects this to work with typical firewalls and tests against several brands. Some
NAT/Firewall configuration may be required. See “Allworx Server behind a Third-Party
NAT Firewall” on page 31 for more information.