Network Reference Guide - TELUS Business Connect
Internet Requirements
Table 2. End-to-End Network Path Performance Requirements
| Network Property | Requirement |
|---|---|
| Link Capacity | Each link in the end-to-end path must have symmetric (bidirectional) capacity which is larger than the maximum number of simultaneous calls plus capacity added for other types of non-real-time traffic and growth (Tables T.2 & T.3) |
| Delay | < 150 ms (of one way latency)* |
| Packet Loss | < 1% |
| Jitter | < 30 ms |
Bandwidth - Hard Phones and VoIP Apps
Table T.2 - Business Connect Desk, Conference and Cordless Phone and VoIP App - Transmit and Receive Bandwidth
| Endpoint | Codec | Transmit and Receive Bandwidth (Kbps) |
|---|---|---|
| Desk phone and IP Conference phone | G.711 | 87 |
| G.729 | 31 | |
| G.722 | 87 | |
| Opus | 60 - 80 | |
| Video* | 616 | |
| Desktop or mobile VoIP App component | Opus | 60 - 80 |
Bandwidth - Business Connect Video
Table T.3 - Business Connect Video - Transmit and Receive Bandwidth
| Use Case | Transmit Bandwidth (Kbps) | Receive Bandwidth (Kbps) |
|---|---|---|
| Group video conference call (>10 participants) | 1750 | 4000 |
| Group video conference call (3-10 participants) | 2250 | 6100 |
| 2-party video call | 3550 | 2090 |
| Group audio-only conference call | 70 - 100 | 70 - 100 |
Business Connect IP Supernets
Test Server (does not de-prioritize pings): 199.255.120.184
Table 3. Business Connect IP Supernets
| 66.81.240.0/20 |
| 80.81.128.0/20 |
| 103.44.68.0/22 |
| 104.245.56.0/21 |
| 185.23.248.0/22 |
| 192.209.24.0/21 |
| 199.68.212.0/22 |
| 199.255.120.0/22 |
| 208.87.40.0/22 |
Functions to Disable
Table 4. Functions which may impair SIP signaling and/or RTP media traffic
| Layer | Function |
|---|---|
| Application | • SIP Application Layer Gateway (SIP ALG), also referred to as SIP Transformations |
| • Deep Packet Inspection (DPI) | |
| • Application Layer Access Control | |
| • Stateful Packet Inspection (SPI), also called Dynamic Packet Filtering | |
| • Intrusion Detection/Intrusion Prevention System (IDS/IPS) | |
| • Web Proxy operation | |
| • WAN Acceleration | |
| Transport | • Port filtering |
| IP | • Packet-by-packet load balancing across multiple Service Providers links |
| IP & Data Link | • Auto-QoS, when used in combination with Polycom/Poly phones |
| • Dynamic ARP Inspection | |
| Physical | • Energy Efficient Ethernet (a.k.a. Green Ethernet) |
| • Satellite (Ethernet over microwave) network connections |
Domains to Whitelist
Table 5. Whitelisting of Domains and IP Addresses
| Purpose | Cloud Service | Domain Name / IP Address (To be whitelisted) | Destination Ports (To be whitelisted) |
|---|---|---|---|
| Business Connect Website | Information & Support | www.telus.com/businessconnect www.telus.com/business/support/topic/phone/ business-connect-voip | TCP\443 |
| Voice Manager (Online Portal) | Login Page | voicemanager.businessconnect.telus.com | TCP\443 |
| Analytics | Dashboard | analytics.businessconnect.telus.com 35.190.70.192 | TCP\443 |
| Softphone Archiver | Secure File Transfer | For archiving to an enterprise SFTP server, the following SFTP client IP addresses in the Business Connect cloud need to be whitelisted: | TCP\22 |
| 34.225.218.68, 34.226.29.169, 34.234.210.244, 34.236.210.8, 34.239.13.99, 35.172.123.110, 52.87.7.127, 54.80.51.95 | |||
| Any of these IP addresses may dynamically be selected by the Business Connect SFTP client to connect to an enterprise SFTP server. | |||
| Business Connect App | App | app.businessconnect.telus.com | TCP\443 |
| Business Connect Video | Login Page | video.businessconnect.telus.com | See Table B.6 - TCP\443 |
| Desktop Softphone Application & Mobile Application | Presence Status, Call Log Notifications, and Voicemail notifications | *.pubnub.com | TCP\443 |
| *.pubnub.net | |||
| *.pndsn.com | |||
| ringcentral.pubnubapi.com (for newer endpoint versions) | |||
| Google Chrome Extension | Login Page | account.google.com | TCP\443 |
| Chrome APIs for plugin | apis.google.com | ||
| Fonts used by Google Chrome | fonts.gstatic.com | ||
| SIP Proxy Server | SIP Registration | *.ringcentral.com | |
| If the proxy/firewall server cannot handle wildcards, then use the signaling ports TCP\5090-5099 and media ports UDP\20000-64999 in combination with the supernets indicated in Table 3 | |||
| Soft Clients | Software and Provisioning | *.cloudfront.net | TCP\443 |
| Polycom/Poly Desk Phones and Conference Phones | Provisioning | pp.ringcentral.com | TCP\443 |
| Firmware Update | pp.s3.ringcentral.com | ||
| Cisco Desk Phones | Provisioning and firmware update | cp.ringcentral.com | TCP\443 |
| Yealink Desk Phones | Provisioning and firmware update | yp.ringcentral.com | TCP\443 |
DSCP Values & Traffic Shaping
Table 6. Traffic Types and Classification
| Traffic Class | CoS Decimal Value (Layer 2) | DSCP Decimal Value (Layer 3) | Name (Layer 3) | Drop Probability (Layer 3) |
|---|---|---|---|---|
| VoIP Media - Real Time | 5 | 46 | EF | N/A |
| Video Media - Real Time | 4 | 34 | AF41 | Low |
| SIP | 3 | 26 | AF31 | Low |
| Transactional: | 2 | 18 | AF21 | Low |
| • Network Time Service | ||||
| • Mobile App Data Sync | ||||
| • LDAP Directory Service | ||||
| Best Effort: Phone Provisioning and firmware update | 0 | 0 | BE | Undetermined |
Table 7. Traffic Types and Classification
| Traffic Class | CoS Decimal Value (Layer 2) | DSCP Decimal Value (Layer 3) | Name (Layer 3) | Drop Probability (Layer 3) |
|---|---|---|---|---|
| VoIP Media - Real Time | 5 | 46 | EF | N/A |
| Video Media - Real Time SIP | ||||
| Transactional: | 0 | 0 | BE | Undetermined |
| • Network Time Service | ||||
| • Mobile App Data Sync | ||||
| • LDAP Directory Service | ||||
| • Best Effort: Phone Provisioning and firmware update |
Port Ranges & Protocols
Table B.1 - Desk, Conference and Cordless Phone
| Traffic Type | Application Protocol | Destination Ports |
|---|---|---|
| Media | RTP | UDP\20000-64999 |
| Media - Secured | SRTP | UDP\20000-64999 |
| Signaling | SIP | TCP\5090, TCP\5099**, UDP\5090 |
| Signaling - Secured | SIP/TLS | TCP\5096, TCP\5098** |
| Network Time Service | NTP | UDP\123 |
| LDAP Directory Service | LDAP/(TLS/SSL) | TCP\636 |
| Provisioning | HTTP and HTTPS | TCP\443 |
** Ports 5098 and 5099 only need to be opened for Busy Lamp Appearance when line sharing is used.
Table B.2 - Desktop Softphone Application
| Traffic Type | Application Protocol | Destination Ports |
|---|---|---|
| Media | RTP | UDP\20000-64999 |
| Media - Secured | SRTP | UDP\20000-64999 |
| Signaling | SIP | TCP\5091 |
| Signaling - Secured | SIP/TLS | TCP\5097 |
| LDAP Directory Service | LDAP/(TLS/SSL) | TCP\636 |
| Provisioning and Presence Status | HTTP and HTTPS | TCP\80 and TCP\443 |
Table B.3 - iOS and Android Mobile Phone Application (on Wi-Fi Network)
The following is the specific ports usage, but it's recommended to open the port range 5090-5099 for UDP/TCP/TLS because new ports may be added and some ports configuration may be changed within this range.
| Traffic Type | Application Protocol | Destination Ports |
|---|---|---|
| Media | RTP | UDP\20000-64999 |
| Media - Secured | SRTP | UDP\20000-64999 |
| Signaling | SIP | UDP\5090 and UDP\5091 |
| TCP\5090 and TCP\5091 | ||
| Signaling (IPv6 client) | SIP/WSS/TLS | TCP\5090-5098 |
| TCP\8085-8090 | ||
| Signaling - Secured | SIP/WSS/TLS | TCP\5097 |
| TCP\8085-8090 | ||
| Mobile App Data Sync with Business Connect backend (e.g., call log info, presence, and voicemails) | HTTPS | TCP\443 |
| LDAP Directory Service | LDAP | TCP\636 |
| Provisioning and Presence Status | HTTP and HTTPS | TCP\80 and TCP\443 |
Table B.5 - WebRTC Telephony (Chrome Extension, Business Connect PC App)
| Traffic Type | Application Protocol | Destination Ports |
|---|---|---|
| Media | UDP\20000-64999 | |
| Signaling | TCP\8083 | |
| LDAP Directory Service | LDAP/TLS | TCP\636 and TCP\3269 |
| Presence Status | TCP\6182 | |
| Access Control | STUN | UDP\19302 |
Table B.6 - Business Connect Video - Desktop Client and Chrome Browser
| Traffic Type | Application Protocol | Destination Ports |
|---|---|---|
| Media - Secured | SRTP | UDP\10000-19999 (default) |
| SRTP | TCP\443 (if UDP is not available) | |
| Signaling - Secured | HTTPS/WSS/TLS | TCP\443 |