I do dozens of VZW WiFi calls a day. My phone is behind NAT, no problem. It's probably 50/50 where the call starts on WiFi vs switches to WiFi after ~3 seconds from the poor VZW signal.
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Fri, Jul 17, 2020 at 12:59 PM Alex Buie via NANOG <nanog@nanog.org> wrote: > It's been a minute since I've set this up in a corp/campus wifi scenario, > but my notes for Verizon VoWiFi from the last time I did say that you need > outbound udp/500 and udp/4500 IPSec protocol (IKE and ESP) permitted out > the firewall. Tunnel endpoints live in 141.207.0.0/16, so hopefully that > lets you scope the rule enough to please your ISO. > > Devices will also need the ability to make an HTTPS request to > https://spg.vzw.com/SSFGateway/e911Location/changeAddress > > As well, DNS queries for the ePDG domain wo.vzwwo.com need to be > permitted. > > That _should_ be all you need to get it bootstrapped. > > Alex > > On Fri, Jul 17, 2020 at 12:39 PM Lyden, John C <ly...@rowan.edu> wrote: > >> Hey gang. >> >> >> >> We’re setting up a unified wireless network for the students here, and to >> get around the issues with Nintendo and NAT we devoted a large chunk of >> public IP space to them. >> >> >> >> We’re aware that this is causing issues with wifi calling on Verizon, TMo >> etc because it appears they initiate the SIP session inbound. >> >> >> >> Does anybody have a handy list of IP blocks and ports? T-Mobile had a >> decent page but other providers just said “open up 4500 and 500” and our >> ISO guys don’t like that. >> >> >> >> Thanks if someone can help. >> >> >> >> John C. Lyden >> >> Manager of Network Infrastructure, Infrastructure Services >> >> Division of Information Resources & Technology, Rowan University >> >> >> > > > -- > *Alex Buie* > Associate Network Engineer > Datto, Inc. > 475-288-4550 (o) > 585-653-8779 (c) > www.datto.com > > <http://www.datto.com/support-sig/> > > Join the conversation! [image: Facebook] > <http://www.facebook.com/dattoinc> [image: Twitter] > <https://twitter.com/Datto> [image: LinkedIn] > <https://www.linkedin.com/company/5213385> [image: Blog RSS] > <http://blog.datto.com/blog> [image: Slideshare] > <http://www.slideshare.net/backupify> [image: Spiceworks] > <https://community.spiceworks.com/pages/datto> >
