PIAF 2.0.6.X.X FAQ Everything you need to know

 

The following information is valid if your choose PBX in a Flash 2.0.6.X.X (build your own variance) package during your order.  Please do not follow this information if you order PBX in a Flash 2.0.6.X.X(Purple with FreePBX 2.9 or Brown with FreePBX 2.10.

1. During initial login to your ssh console, please run piafdl for PBX in a Flash 2.0.6.2.3 or earlier.  Please run usr/local/sbin/isomenu for PBX in a Flash 2.0.6.2.4 or later. PBX in a Flash 2.0.6.2.4 or later include a capability to build additonal features such as independent Neorouter.  For more information about them,  please consult http://pbxinaflash.com/community/index.php.  Specifically http://pbxinaflash.com/community/index.php?threads/new-isos-released.13465/

 

  • During this process,  you will choose your FreePBX version (2.8,2.9,2.10) and  PIAF color (Purple, RED, BROWN (PIAF 2.0.6.2.4 or later) and GREEN (PIAF 2.0.6.3.1 or later)).  You may also choose specific minor version of the Asterisk as explained in http://pbxinaflash.com/community/index.php?threads/pbx-in-a-flash-2-0-6-x-versions.11848/
  • If you plan to run incrediblepbx 3 script,  you need to choose FreePBX 2.9 and Purple as color.  At this moment,  Incredible 3 script does not support other combination.
  • Prepare to set your own password for web logins
  • Set your timezone
  • Please make sure you have 30 to 60 min to spare for the whole process to complete
  • With this process,  we do not provision your Password to your Web GUI.  Please make sure you save your password securely.  Again,  we do not have this information in case you have forgetten about it.
  • At the end of piafdl process, the server will reboot itself.  You should be able to access your webgui with the http://yourassignedip

 

2. Note on firewall.

 

  • You have full accesss to your firewall setting.  There are many way to set your firewall setting.  One of them is through editing /etc/sysconfig/iptables.  Another option is done through Webmin GUI.
  • We do not close or open any port at network layer.  Please take this into account when troubleshooting your PBX.
  • Please note that PIAF 2.0.6.2 will configure your ssh access with default port ssh port 22.
  • The initial Firewall Rule after the running piafdl allow you to access your WEB GUI.  For your initial configuration process, this is the most convinient process.  If you just learing PIAF, you can keep the rule at this point.
  • Our recommendation is to eventually close all ports except for SIP (udp 5060), IAX (udp 4569), RTP (udp range 10000 to 20000) and ssh port 22.  You can access your Web GUI through "SSH Tunnel".  You also have the option to setup VPN and use it as your access to the the web GUI.
  • Please keep in mind that our service is unmanaged PBX.  If you need any tutorial on SSH Tunnel or VPN, it is beyond the scope of what our unmanaged PBX service can cover.  You may use google to find further information or PIAF Forum for help.

 

3. PIAF Incredible 3.0 and 4.0 notes

 

  • You will most likely unable to connect your SIP, IAX phone/Trunk at this point.  Lets save you some time trouble shooting.  You shoudld check a couple things.
    • You must add your ip to the whitelist rule in your iptables. You can do this by editing /etc/firewall.whitelist. Add all IPs that you will be connecting to in this file.  run the following command in your ssh console "service fail2ban stop && /usr/src/incredpbx3/firewall/firewall-whitelist.sh && service fail2ban start"
    • (OPTIONAL)If your ISP provide you with dynamic ip,  you have the following options
      • Add block of ips with 127.0.0.0/8 syntax.  This mean allow all 127.XXX.XXX.XXX ip.  Find what your ISP block ip and enter it in /etc/firewall.whitelist.  You need to follow up with running the following command in your ssh console "service fail2ban stop && /usr/src/incredpbx3/firewall/firewall-whitelist.sh && service fail2ban start"
      • Setup something like Travelin Man. See concept here http://nerdvittles.com/?p=689 and newer version the following thread http://pbxinaflash.com/forum/showthread.php?t=12179
      • One nice trick with dynamic dns http://pbxinaflash.com/forum/showthread.php?t=12091
    • Incredible PBX will set permit field on your extension.  This IP will not likely be your IP.  You should either empty the permit field or set it to a proper value (your ip or block of ip).  It is just our optinion that this is a redundant security measure.  The whitelist has already provide similiar or perhaps the same type of protection.
  • If you experience " FATAL] Unable to connect to Asterisk Manager from /var/lib/asterisk/bin/retrieve_conf, aborting" after running incredible script, please check in /etc/hosts that you have a line that say "127.0.0.1  localhost localhost.localdomain"
  • If you try to connect to one of PIAF Incredible preset extensions and getting blocked by fail2ban, disable all your sip device and wait 15 to 30 min.  The PBX will unblock your ip.  You may want to check your asterisk log at /var/log/asterisk/log.  If you fine messages like "Device does not match ACL".  play around with type filed on your Extension setting.  You may start with setting the type to peer.

 

 

 

Byla tato odpověď nápomocná?

 Tisknout tento článek

Také čtěte

Choppy Voice Mail, MOH and IVR announcement in PIAF purple 1.7

We have seen some reports about packet loss/choppy audio when playing back Voice Mail, MOH, and...

PBX in a Flash 2.0.6.2.3 (build your own variance) Vs. PBX in a Flash 2.0.6.2.2 (Purple with FreePBX 2.9)

What is the difference between PBX in a Flash 2.0.6.3 build your own variance vs Purple with...

Incredible PBX with ubuntu 14.04 Important Note

Here are some of the importants note in regard to Incredible PBX with ubuntu 14.041.  Please...

Turn PIAF 1.7 Purple into PIAF Incredible.

as of 9/1/2011 our PIAF Purple 1.7 with asterisk 1.8.XX is compatbile with the following scripts...

MULTI TENANT/Sharing PIAF 1.7.5.5 Purple Edition with multiple Google Voice

If you need to share your PBX and create internal virtual PBX which use multiple GVoice as a...