Set up authentication via FQDN (domain) for SIP trunks
What is an FQDN?
A Fully Qualified Domain Name (FQDN) is a complete and globally unique domain name, such as sip.mycompany.com. It replaces the IP address in authentication and makes your configuration much more flexible. Especially when public IP addresses change (for example in cloud environments or with dynamic connections), authentication remains stable as long as the FQDN points to the correct IP address in the DNS.
1. open customer portal
Open the Easybell customer portal. Click on "Phone settings" in the top menu and select "Manage phone numbers".
2. open settings for Trusted IP
Open the settings overview for your phone number by clicking on the cogwheel next to Trusted IPs.
3. set up authentication via FQDN
You will now be taken to the settings for Trusted IP.
To activate authentication via FQDN, go to Incoming and select the FQDN domain option under Authentication via.
Now enter your domain name, e.g. sip.company.com and save your settings
Recommendations for the configuration
If you operate your Cloud PBX based on the Microsoft Azure Cloud, it is best to use TCP or TLS as the transport protocol. For the "Incoming Number Signaling" setting, we also recommend using the E.164 format with a leading plus sign, for example +49301234567.
If domain use is not possible, you can alternatively enter the following IP networks:
- 195.185.187.0/27, 195.52.221.128/27 (UDP/TCP)
- 195.185.187.0/27, 212.172.204.95/32, 212.172.58.207/32 (TLS)
Valid input formats
You should observe a few rules when entering your domain:
| Error message | Cause of error |
|---|---|
| "Please enter a domain." | The domain must not be empty. |
| "Invalid entry. Only use valid domain characters." | Only use valid domain characters (no spaces, special characters or umlauts) |
| "The domain must not be longer than 255 characters." | The domain must not be longer than 255 characters. |
| "The domain could not be resolved. Please check your entry." | If your entry cannot be resolved, you will receive an additional error message. |
Switch back to IP authentication
If you want to switch back to authentication via IP addresses at a later date, you can easily change the method in the customer portal. The field for the domain is automatically cleared and is ready for a new configuration.