If traffic from a particular IP address is judged as being too high - and therefore, probably malicious - this IP address is blocked. This means that accesses from this IP address to the PBX are initially prevented for one minute (single block by block time). The administrator is informed about the block by a system message.
During the block time the PBX continues to monitor the traffic from this IP address. If the traffic from this IP address to the PBX continues to be too high, the single block time is extended (block time restarts).
If the number of attacks from IP addresses over the Internet exceeds a threshold, all traffic outside of the local network is blocked (global block). The local network is the network configured for the CPU.
The administrator must then put in place appropriate measures to protect the PBX within its infrastructure (e.g. using routers or bridges).
Note: The global block deletes all further entries (single blocks) from the blocklist.
Note: When opening the page, it first shows the status which is automatically updated every 30 seconds.
Important: All the entries in the blocklists are deleted when you reboot the PBX.
Network-based access attempts, such as the number of data packets per second or SIP authentication failures are monitored and evaluated.
IPv6 Mode
If IPv6 is configured, an IP address complying with version 6 of the Internet protocol can be assigned to the PBX. Due to the greater length of IPv6 addresses (eight blocks with four digits each, example: 3001:00FF:ABC0:0EAC:0001:0000:0000:000F), IPv6 offers a greater number of available IP addresses than version 4 of the Internet protocol (IPv4).
Configuration
•Configuring identification data.
−Administration > Network > IP configuration > IP configuration
•If required, configuring IPv6 of the identification data.
−Administration > Network > IP configuration > IP configuration > IPv6 configuration >
•Configuring and testing DNS server.
−Administration > Network > IP configuration > DNS configuration
•If required, configuring HTTP proxy.
−Administration > Network > IP configuration > HTTP proxy configuration
•Making network settings for the integrated web server.
−Administration > Network > Server service > Web server configuration
•Managing block- and allowlist.
−Administration > Network > IP block- and allowlist
•Viewing port overview.
−Administration > Network > Ports
Alternative functions on an internal phone
•Configuring and querying the IPv4 address of the PBX
•Configuring and querying the subnet mask of the PBX
•Configuring and querying the gateway of the PBX
•Switching on/off the DHCP client of the PBX and querying the status