BT Cloud Voice

Firewalls and LAN

You need to make sure that your BT Cloud Voice service connects to our network across your internal data network
so you can make and receive consistently high quality calls.

Firewalls
Because there are so many different types of firewalls available, you’re best off contacting your firewall provider to
find out how to configure yours to work best with BT Cloud Voice. So here we’re just giving you the requirements for
BT Cloud Voice.
It may be that you don’t need to do anything at all: your IP handset may register on the network without you having
to do any further configuration. Or if you’re using our Business Hub 5 on its default settings and without a secondary
firewall, you’ll find that your Cloud Voice will be fine.
But if this isn’t the case, and you’re unable to make calls, then you’ll need to make a few changes to your firewall so
BT Cloud Voice can connect with our network.
We recommend that you consult your firewall provider before you make any changes (so you can be sure that you
don’t inadvertently expose your network to any security risks).

LAN
BT Cloud Voice has these network requirements -
 If you’re wanting to use address translation, then SIP will only work with NAT (it doesn’t work with PAT)
 You’ll need access to the protocols and ports detailed in ports.
Depending on the type of firewall you’ve got, you may not need to open any ports: if your firewall is running
‘inside-to-outside’ rules, then you’ll need to open the ports; there shouldn’t be any reason to open ports
that are inbound on the firewall.
 If your router or firewall is SIP-aware or SIP ALG-enabled, you must turn it off (so the device doesn’t
interfere with any signalling).

Prioritisation of VoIP traffic

The BT Business Internet Access service prioritises your SIP signalling and VoIP traffic over other traffic. To make
sure you always get good quality calls, your LAN should also prioritise VoIP traffic.
BT’s SIP platform has an IP address of 85.119.63.1 and 85.119.63.17.
Prioritise traffic to and from this address over other competing traffic in your LAN infrastructure:
1. The incoming and outgoing BT SIP and VoIP (RTP) traffic should take priority over other traffic through the
firewall.
2. If the SIP signalling and VoIP traffic traverses your LAN and competes with other traffic then it should take
priority over that other traffic.

V1.2 Date: 7th January 2015 www.bt.com/btcloudvoice/help Ref: BTLAN-FWALL

© British Telecommunications plc Page 1 of 3
The SIP and VoIP (RTP) packets are not re-marked in terms of CoS, ToS, DSCP or any other Quality of Service
markings. You should not trust any DSCP markings that you receive: do not use for QoS.

Ports
Device Protocol Outbound Destination Destination Port
Service ports
85.119.63.1
(uk.ic.hnt.hipcom.co.uk) UDP/TCP 5060 to
IP Phone (including ATA) SIP
85.119.63.17 5070
(uk.ic.56hnt.hipcom.co.uk)
85.119.63.17 UDP 16384 to
IP Phone (including ATA) RTP
85.119.63.1 32766
IP Phone (including ATA) NTP Supplied Locally¹ or europe.pool.ntp.org UDP/TCP 123

Supplied Locally² (customer DNS server) or

IP Phone (including ATA) DNS UDP/TCP 53
BTnet DNS servers

Handset provisioning
Cisco SPA 112 (ATA) HTTPS 85.119.59.19 (csb.yourservices.co.uk) TCP443
Polycom (VVX handsets and 85.119.59.22 TCP 80 / TCP 443
HTTP / HTTPS
Sound Station) (soundpoint.yourservices.co.uk)
85.119.59.16
Panasonic (SIP DECT) HTTP / HTTPS TCP 80 / TCP 443
(panasonic.yourservices.co.uk/TGP500.cfg)

Web portals
BT Cloud Voice Portal HTTPS 85.119.59.2 TCP443
Call Recording Portal HTTPS 85.119.59.2 (recorder.yourservices.co.uk) TCP443

Applications
85.119.62.3
BT Cloud Voice Toolbar Proprietary 85.119.62.4 TCP 2208
(applications.yourservices.co.uk)
85.119.62.3
BT Cloud Voice Reception
Proprietary 85.119.62.4 TCP 2208
Console
(applications.yourservices.co.uk)
85.119.62.3
CRM Connect Proprietary 85.119.62.4 TCP 2208
(applications.yourservices.co.uk)
85.119.59.2
CRM Connect HTTPS TCP 443
(ccusage.yourservices.co.uk)
85.119.59.31
(ucoffice.yourservices.co.uk)
BT Cloud Voice Communicator HTTPS TCP 443
95.172.95.114
95.172.95.82
TCP 5222
BT Cloud Voice Communicator XMPP 95.172.95.82
TCP 1081

V1.2 Date: 7th January 2015 Ref: BTLAN-FWALL

© British Telecommunications plc www.bt.com/btcloudvoice/help Page 2 of 3
 85.119.63.1
UDP/TCP 5060 to
BT Cloud Voice Communicator SIP 85.119.63.17
5070
(uk.ic.hnt.hipcom.co.uk)
85.119.63.1
UDP 16384 to
BT Cloud Voice Communicator RTP 85.119.63.17
32766
(uk.ic.hnt.hipcom.co.uk)
Supplied Locally² (customer DNS server) or
BT Cloud Voice Communicator DNS UDP/TCP 53
BTnet DNS Servers
¹ local NTP must be traceable to suitable stratum 3 or better servers for CPE clock accuracy (NTP cannot be supplied
locally for Polycom phones)
² locally provided DNS must support global searches traceable to primary DNS servers

Important stuff
Your BT Cloud Voice service together with a correctly dimensioned BT Business access service has been designed to
appropriately support a quality voice service alongside the use of data. In order to maintain the quality it is essential
that the internal network components suitably support the service for delivery of your voice calls. If this is not
implemented correctly then this may result in a degraded service. If faults are reported to BT which are found to be
caused by customer equipment (i.e. equipment which that is not part of BT’s network and which is owned or
controlled by the customer) then BT may apply a charge.
The information in this document is provided for general guidance only. It is recommended that your firewall
maintainer, switch maintainer or IT consultant is consulted on all matters relating to your communications network
including, but not limited to, LAN and firewall configuration. This is particularly important in connection with any
issues which may impact on your network security or local IT policies.

V1.2 Date: 7th January 2015 Ref: BTLAN-FWALL

© British Telecommunications plc www.bt.com/btcloudvoice/help Page 3 of 3