VoIP implementation guidelines

Almost all issues occur due to incorrect configuration of infrastructure and/ or hardware. The following items apply as a generic guide and should be observed in all situations, regardless of the hardware used.


  • Avoid NAT behind NAT at all times.

  • SIP functions (e.g. SIP ALG) in the router must always be switched off.

  • Do not use STUN, TURN, ICE, or UPnP.

  • Switch on Keep-A-Live (10 seconds is a good value).

  • Port Forwarding is not necessary and is not recommended.

  • Preferably use a dedicated internet connection for VoIP to rule out interference from other data traffic. Contention ratio (1:1).

  • Dimension the data line on the basis of 0.1 Mbps per call (up and down) when using G.711 A-law (PCMA), or 0.033 Mbps per call when using G.729.

  • Make sure the MTU in the modem/ router is correctly set for the data line used.

  • Use a separate network for voice and data (VLAN).

  • Configure QOS in switches and routers to guarantee bandwidth and prioritise voice traffic.

  • Always use hostnames for registration. IP addresses may change.

  • The proxy domain supports SRV records.

  • SIP/ UDP is preferred over SIP/ TCP.

  • Preferably use G.711 A-law (PCMA). This gives the best sound quality. Where bandwidth is limited G.729a may be considered.

  • DTMF support is based on RFC2833

Hosted PBX

  • Preferably use the G.711a (PCMA) codec with a packet size of 20 milliseconds

  • Take advantage of unique local listen port for each SIP device (5061, 5062 etc.)

  • A good NAT router is important for hosted VoIP telephony. Good examples: Cisco 800/1800, Mikrotik (Router Board)

Your own IP PBX

  • Preferably do not install the IP PBX behind NAT. If it is desired to do so, place the PBX behind NAT 1:1 with an unused public IP address.

  • Avoid dynamic NAT. This often causes problems.

  • Provide the IP PBX with a firewall that only allows traffic to and from a restricted IP range. More info…

  • Let the IP PBX authenticate/ match on account_id and not on hostname. Incoming traffic can come from multiple hosts and therefore can be denied.

  • A static trunk is more reliable than a dynamic trunk with registration.

  • By default DID/ DDI is set to the full number (including country code with a ‘+’ prefix). This can be changed in Freedom if desired.

  • Outgoing CallerID has the same format. (+27210123456)


  • Recommended packet size for G.711 A-law faxes is 10 milliseconds.

  • For fax always use T.38.

  • Echo cancellation must be switched off.

Did this answer your question?