Mitel One Web
The following table lists the connections from Mitel One to the external destination unless specified. The rules used for establishing the connections assume a firewall that permits return traffic on these established connections. This is referred to as pin hole punching. If pin hole punching is not available or has been disabled on the firewall, then you must exercise your own due diligence in configuring and testing the connections with the ports listed.
- The port requirements for WebSockets are given here: Device communication protocols - AWS IoT Core.
- If you are using a proxy server, ensure that it proxies WebSockets and HTTPS.
- The Mitel One web application uses WebRTC. By default, the CS0 value is set to the same as the DSCO value.
- Check using Amazon Chime Readiness Checker whether your firewall rules require updating for AWS Chime support.
- For more information about VPN recommendations and network requirements, see Network Handling and Requirements.
- For AWS Chime rules, see Hosts, Ports and Protocols needed for Amazon Chime services - Amazon Chime Help Center. The CloudLink Platform IP address ranges in AWS will cover the AWS IP address ranges mentioned in the document link. For details, see the CloudLink Platform IP Ranges section in this document. In addition, the highlighted feature used is Amazon Chime Meetings, Chat, and Business Calling.
- ICMP must be enabled on the firewall.
- Source port numbers are typically managed by the network stack.
- For more details about the media flow, see CloudLink Platform.
- * The RTP/RTCP source port range for the softphone is automatically selected by WebRTC or the OS, respectively. There are no restrictions on the port range.
Examples of the IP address ranges which are expected can be found here.
| Purpose | Direction | Protocol | Domain Name | IP Address Range | Ports |
|---|---|---|---|---|---|
|
Managed Services provided by the CloudLink Platform including APIs and portals |
App to Internet |
TCP |
*.mitel.io |
See the CloudLink Platform IP Address Ranges section in this document. |
443 |
|
STUN Service |
App to Internet |
UDP |
*.mitel.io |
See the CloudLink Platform IP Address Ranges section in this document. |
3478 and 3479 |
|
DNS Service |
GW to Internet |
UDP |
N/A |
Customer’s configured DNS |
53 |
|
WebRTC Connectivity * |
App to Internet |
TCP |
*.mitel.io |
See the CloudLink Platform IP Address Ranges section in this document. |
7443 |
|
RTP/SRTP Connectivity |
App to Internet |
UDP |
*.mitel.io |
See the CloudLink Platform IP Address Ranges section in this document. |
16384 to 49152 |
|
WebSocket Connectivity |
App to Internet |
TCP |
*.amazonaws.com |
See the CloudLink Platform IP Address Ranges section in this document. |
See note on WebSocket above |
|
Meet Capability |
App to Internet |
TCP and UDP |
See note on AWS Chime above |
See note on AWS Chime above |
See note on AWS Chime above |
|
Google Cloud Resources |
App to Internet |
TCP |
*.gstatic.com *.googleapis.com |
Google IP address ranges can be found here: Obtain Google IP address ranges - Google Workspace Admin Help (See "IP ranges that Google makes available to users on the internet" in the given link.) |
443 |
|
cdnjs open-source content delivery network hosed on Cloudflare |
App to Internet |
TCP |
443 |
||
|
Required for CloudLink Single Sign-On deployment using Azure AD federation |
App to Internet |
TCP |
*.microsoftonline.com *.microsoft.com |
The IP address range published by Microsoft is shown here: Office 365 URLs and IP address ranges - Microsoft 365 Enterprise . See "ID 56" in the table of the given link. |
443 |
|
Bugsnag Troubleshooting service |
App to Internet |
TCP |
443 |
||
|
LaunchDarkly feature flag management |
App to Internet |
TCP |
See Domain List |
See Public IP list |
443 |