Grandstream ATA configuration guide clairification

[random192]

Hello all,

I believe I am not correctly understanding the guide to integrate a HT-813 to bring an FXO line into the system. In the guide for integrating a GXW410X FXO Gateway under Step 3 instruction 3 "under Channel Dialing to VoIP" it states: Set the User ID to the Ring group or extension set up in the UCx server to terminate inbound calls. The system I am working with has just one simple ring group 610. Should I set it to 610 or do I need to create a ring group specifically for this?

Right below that its gives an example of how to setup multiple inbound targets. In my case I'm only bringing one line into the system do I still need to specify channels? My device has one FXO and one FXS port. The FXS port will be unused how do I determine if the FXO port qualifies as channel 1 or 2 or something else? Do I still need to specify ch1:610 for the user ID or is just 610 fine?

In step 7 they instruct: "Set the DID number to the same number that you set in the Gateway User ID (see Step Three, Configure FXO Lines section)". The DID number in the trunk configuration page? Should this be 610 or ch1:610 or even ch1:610 or ch1:610:; as it seems to appear in one of the example images?

Any guidance is greatly appreciated. In the long term I will be ordering an FXO card for the Mini however the site has been having networking related issues and I'm desperately trying to bring at least 1 line into the system to restore functionality until I can address some other issues at the residence.

Best regards,

 

[random192]

Update

When I try to call into the system I see the following in the logs.

[2020-09-06 14:22:03.058] NOTICE[23448][C-00000000] acl.c: SIP Peer ACL: Rejecting '192.168.1.66' due to a failure to pass ACL '(BASELINE)'
[2020-09-06 14:22:03.058] NOTICE[23448][C-00000000] chan_sip.c: Failed to authenticate device sipI see the phone number I'm calling in from here) for INVITE, code = -7 @192.168.1.66:46827
[2020-09-06 14:22:03.058] SECURITY[23489] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-06T14:22:03.058-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="610",SessionID="0x7fd998005858",LocalAddress="IPV4/UDP/192.168.1.67/5060",RemoteAddress="IPV4/UDP/192.168.1.66/46827",ACLName="device_must_match_acl"

The call does not hit the ring group 610 .66 is the HT813 .67 is the Mini

 

[ucxguy]

Failure to pass ACL indicates that your permit/deny rules for the SIP endpoint do not match the IP address of the endpoint. You can either remove the rules altogether or you can change them to match the endpoints IP address. In your case, the endpoint is 192.168.1.66 - so the permit should be something like 192.168.1.66/255.255.255.255 or to use a rule for the entire subnet 192.168.1.66/255.255.255.0

 

[random192]

Hi ucxguy,

Thanks for your reply especially on a holiday weekend. At first I went looking for ACL settings in firewall tab and even tried creating allow rules or even outright disabling the firewall to no success. Then after reading your comment a few times I realized the only other place I had seen permit and deny settings was in the trunk configurations page and it all made sense. Thank you for pointing me in the right direction its much appreciated! Have a fantastic day good sir!

Best regards,