Configuring a SonicWall Firewall with RingQ

Introduction

This document describes the configuration of Dell SonicWall firewall devices for use with RingQ. The guide applies to SonicWall firewalls configured using Many-to-One NAT. Please note that we cannot help with the configuration of your firewall.

Create Service Objects

To configure the SonicWall, you need to create the service objects for each port or port range that needs to be forwarded. Then place these service objects in a service group, after which you must apply the policies.

1. Open the Web Management Console of the Dell SonicWall Firewall Gateway and go to Network → Services.
2. In the Services section, add one service object for each port that RingQ requires forwarding for.
3. In the Service Groups section, add a new service group named RingQ Services and add all of the above service objects as members.
4. Now go to Network → Address Object and locate the Address Objects section.
5. Here add a new Address Object and set:
   1. Name: RingQ PBX
   2. Zone Assignment: LAN
   3. Type: Host
   4. IP Address: The LAN IP address of your RingQ server

Create NAT Policy

1. Go to Network → NAT Policies and press Add.
2. Create your inbound NAT policy by filling in the following fields:
   1. General tab:
      1. Original Source: Any
      2. Translated Source: Original
      3. Original Destination: WAN Interface IP
      4. Translated Destination: RingQ PBX (this is the Address Object created in Step 1)
      5. Original Service: RingQ Services (this is the Service Group created in Step 1)
      6. Translated Service: Original
      7. Inbound Interface: Select the WAN interface your RingQ will be using
      8. Outbound Interface: Any
      9. Comment: RingQ Inbound Connections
      10. Enable NAT Policy: Checked/Enabled

1. Press Add again to create your outbound NAT policy by filling in the following fields:
   1. General tab:
      1. Original Source: RingQ PBX (this is the Address Object created in Step 1)
      2. Translated Source: WAN Interface IP
      3. Original Destination: Any
      4. Translated Destination: Original
      5. Original Service: Any
      6. Translated Service: Original
      7. Inbound Interface: Any
      8. Outbound Interface: Select the WAN interface your RingQ will be using
      9. Comment: RingQ Outbound Connections
      10. Enable NAT Policy: Checked/Enabled
   2. Advanced tab:
      1. Disable Source Port Remap: Checked/Enabled

Creating Firewall Access Rules

1. Go to Firewall → Access Rules, select the WAN to LAN option, and press Add.
2. Create a new Access Rule with the following fields:
   1. General tab:
      1. Action: Allow
      2. From Zone: WAN
      3. To Zone: LAN
      4. Service: RingQ Services (this is the Service Group created in Step 1)
      5. Source: Any
      6. Destination: Select the Address Object of the WAN/Public IP you have configured RingQ to use
      7. Users Allowed: All
      8. Schedule: Always on
      9. Comment: RingQ Inbound Access
      10. Allow Fragmented Packets: Checked/Enabled

Disable SIP Transformations

1. Go to VoIP → Settings.

1. In the SIP Settings section, disable the option Enable SIP Transformations.