Network Reference Guide - TELUS Business Connect
Technical Network guides for your Business Connect
Internet Requirements
Table 2. End-to-End Network Path Performance Requirements
Network Property | Requirement |
Link Capacity | Each link in the end-to-end path must have symmetric (bidirectional) capacity which is larger than the maximum number of simultaneous calls plus capacity added for other types of non-real-time traffic and growth (Tables T.2 & T.3) |
Delay | < 150 ms (of one way latency)* |
Packet Loss | < 1% |
Jitter | < 30 ms |
Bandwidth - Hard Phones and VoIP Apps
Table T.2 - Business Connect Desk, Conference and Cordless Phone and VoIP App - Transmit and Receive Bandwidth
Endpoint | Codec | Transmit and Receive Bandwidth (Kbps) |
Desk phone and IP Conference phone | G.711 | 87 |
G.729 | 31 | |
G.722 | 87 | |
Opus | 60 - 80 | |
Video* | 616 | |
Desktop or mobile VoIP App component | Opus | 60 - 80 |
Bandwidth - Business Connect Video
Table T.3 - Business Connect Video - Transmit and Receive Bandwidth
Use Case | Transmit Bandwidth (Kbps) | Receive Bandwidth (Kbps) |
Group video conference call (>10 participants) | 1750 | 4000 |
Group video conference call (3-10 participants) | 2250 | 6100 |
2-party video call | 3550 | 2090 |
Group audio-only conference call | 70 - 100 | 70 - 100 |
Business Connect IP Supernets
Test Server (does not de-prioritize pings): 199.255.120.184
Table 3. Business Connect IP Supernets
66.81.240.0/20 |
80.81.128.0/20 |
103.44.68.0/22 |
104.245.56.0/21 |
185.23.248.0/22 |
192.209.24.0/21 |
199.68.212.0/22 |
199.255.120.0/22 |
208.87.40.0/22 |
Functions to Disable
Table 4. Functions which may impair SIP signaling and/or RTP media traffic
Layer | Function |
Application | • SIP Application Layer Gateway (SIP ALG), also referred to as SIP Transformations |
• Deep Packet Inspection (DPI) | |
• Application Layer Access Control | |
• Stateful Packet Inspection (SPI), also called Dynamic Packet Filtering | |
• Intrusion Detection/Intrusion Prevention System (IDS/IPS) | |
• Web Proxy operation | |
• WAN Acceleration | |
Transport | • Port filtering |
IP | • Packet-by-packet load balancing across multiple Service Providers links |
IP & Data Link | • Auto-QoS, when used in combination with Polycom/Poly phones |
• Dynamic ARP Inspection | |
Physical | • Energy Efficient Ethernet (a.k.a. Green Ethernet) |
• Satellite (Ethernet over microwave) network connections |
Domains to Whitelist
Table 5. Whitelisting of Domains and IP Addresses
Purpose | Cloud Service | Domain Name / IP Address (To be whitelisted) | Destination Ports (To be whitelisted) |
Business Connect Website | Information & Support | www.telus.com/businessconnect www.telus.com/business/support/topic/phone/ business-connect-voip | TCP\443 |
Voice Manager (Online Portal) | Login Page | voicemanager.businessconnect.telus.com | TCP\443 |
Analytics | Dashboard | analytics.businessconnect.telus.com 35.190.70.192 | TCP\443 |
Softphone Archiver | Secure File Transfer | For archiving to an enterprise SFTP server, the following SFTP client IP addresses in the Business Connect cloud need to be whitelisted: | TCP\22 |
34.225.218.68, 34.226.29.169, 34.234.210.244, 34.236.210.8, 34.239.13.99, 35.172.123.110, 52.87.7.127, 54.80.51.95 | |||
Any of these IP addresses may dynamically be selected by the Business Connect SFTP client to connect to an enterprise SFTP server. | |||
Business Connect App | App | app.businessconnect.telus.com | TCP\443 |
Business Connect Video | Login Page | video.businessconnect.telus.com | See Table B.6 - TCP\443 |
Desktop Softphone Application & Mobile Application | Presence Status, Call Log Notifications, and Voicemail notifications | .pubnub.com* | TCP\443 |
.pubnub.net* | |||
.pndsn.com* | |||
ringcentral.pubnubapi.com (for newer endpoint versions) | |||
Google Chrome Extension | Login Page | account.google.com | TCP\443 |
Chrome APIs for plugin | apis.google.com | ||
Fonts used by Google Chrome | fonts.gstatic.com | ||
SIP Proxy Server | SIP Registration | .ringcentral.com* | |
If the proxy/firewall server cannot handle wildcards, then use the signaling ports TCP\5090-5099 and media ports UDP\20000-64999 in combination with the supernets indicated in Table 3 | |||
Soft Clients | Software and Provisioning | .cloudfront.net* | TCP\443 |
Polycom/Poly Desk Phones and Conference Phones | Provisioning | pp.ringcentral.com | TCP\443 |
Firmware Update | pp.s3.ringcentral.com | ||
Cisco Desk Phones | Provisioning and firmware update | cp.ringcentral.com | TCP\443 |
Yealink Desk Phones | Provisioning and firmware update | yp.ringcentral.com | TCP\443 |
DSCP Values & Traffic Shaping
Table 6. Traffic Types and Classification
Traffic Class | CoS Decimal Value (Layer 2) | DSCP Decimal Value (Layer 3) | Name (Layer 3) | Drop Probability (Layer 3) |
VoIP Media - Real Time | 5 | 46 | EF | N/A |
Video Media - Real Time | 4 | 34 | AF41 | Low |
SIP | 3 | 26 | AF31 | Low |
Transactional: | 2 | 18 | AF21 | Low |
• Network Time Service | ||||
• Mobile App Data Sync | ||||
• LDAP Directory Service | ||||
Best Effort: Phone Provisioning and firmware update | 0 | 0 | BE | Undetermined |
Table 7. Traffic Types and Classification
Traffic Class | CoS Decimal Value (Layer 2) | DSCP Decimal Value (Layer 3) | Name (Layer 3) | Drop Probability (Layer 3) |
VoIP Media - Real Time | 5 | 46 | EF | N/A |
Video Media - Real Time SIP | ||||
Transactional: | 0 | 0 | BE | Undetermined |
• Network Time Service | ||||
• Mobile App Data Sync | ||||
• LDAP Directory Service | ||||
• Best Effort: Phone Provisioning and firmware update |
Port Ranges & Protocols
Table B.1 - Desk, Conference and Cordless Phone
Traffic Type | Application Protocol | Destination Ports |
Media | RTP | UDP\20000-64999 |
Media - Secured | SRTP | UDP\20000-64999 |
Signaling | SIP | TCP\5090, TCP\5099**, UDP\5090 |
Signaling - Secured | SIP/TLS | TCP\5096, TCP\5098** |
Network Time Service | NTP | UDP\123 |
LDAP Directory Service | LDAP/(TLS/SSL) | TCP\636 |
Provisioning | HTTP and HTTPS | TCP\443 |
** Ports 5098 and 5099 only need to be opened for Busy Lamp Appearance when line sharing is used.
Table B.2 - Desktop Softphone Application
Traffic Type | Application Protocol | Destination Ports |
Media | RTP | UDP\20000-64999 |
Media - Secured | SRTP | UDP\20000-64999 |
Signaling | SIP | TCP\5091 |
Signaling - Secured | SIP/TLS | TCP\5097 |
LDAP Directory Service | LDAP/(TLS/SSL) | TCP\636 |
Provisioning and Presence Status | HTTP and HTTPS | TCP\80 and TCP\443 |
Table B.3 - iOS and Android Mobile Phone Application (on Wi-Fi Network)
The following is the specific ports usage, but it's recommended to open the port range 5090-5099 for UDP/TCP/TLS because new ports may be added and some ports configuration may be changed within this range.
Traffic Type | Application Protocol | Destination Ports |
Media | RTP | UDP\20000-64999 |
Media - Secured | SRTP | UDP\20000-64999 |
Signaling | SIP | UDP\5090 and UDP\5091 |
TCP\5090 and TCP\5091 | ||
Signaling (IPv6 client) | SIP/WSS/TLS | TCP\5090-5098 |
TCP\8085-8090 | ||
Signaling - Secured | SIP/WSS/TLS | TCP\5097 |
TCP\8085-8090 | ||
Mobile App Data Sync with Business Connect backend (e.g., call log info, presence, and voicemails) | HTTPS | TCP\443 |
LDAP Directory Service | LDAP | TCP\636 |
Provisioning and Presence Status | HTTP and HTTPS | TCP\80 and TCP\443 |
Table B.5 - WebRTC Telephony (Chrome Extension, Business Connect PC App)
Traffic Type | Application Protocol | Destination Ports |
Media | UDP\20000-64999 | |
Signaling | TCP\8083 | |
LDAP Directory Service | LDAP/TLS | TCP\636 and TCP\3269 |
Presence Status | TCP\6182 | |
Access Control | STUN | UDP\19302 |
Table B.6 - Business Connect Video - Desktop Client and Chrome Browser
Traffic Type | Application Protocol | Destination Ports |
Media - Secured | SRTP | UDP\10000-19999 (default) |
SRTP | TCP\443 (if UDP is not available) | |
Signaling - Secured | HTTPS/WSS/TLS | TCP\443 |