Set the PBX static IP address.  Click on the Networking tab, at the bottom of the left side navigation menu, then click on the PBX IP link.  You must enter the PBX IP information statically on this page, even if your current network connection is only temporary.  You can statically set the PBX IP address to the DHCP address it is already on, however the recommended method for connecting any network device statically is to assign it an address that is outside the range of addresses reserved for DHCP in the router.  For example, if your router is configured to hand out DHCP addresses between 192.168.1.100 -.200, you should assign a static address below 192.168.1.100, or above 192.168.1.200.  The usable addresses are from x.x.x.1 to x.x.x.254, though usually the .1 or the .254 address is taken by the gateway (router) itself.  If your router is currently set to use the entire IP range for DHCP, you should narrow that range before setting any network device, including the PBX, to a static address.  This will ensure that no other device will get the same address.


Make certain you have the correct subnet mask, gateway address and DNS server addresses.  You can enter multiple DNS servers, up to 6, by separating them with a comma (no space), or with a “return” character (enter key).  It is a good practice to include the Google DNS server of 8.8.8.8 in your DNS server list.  Triple check all your entries before saving them.  If you make an error here, you will be unable to log into the PBX after rebooting and you will be forced to use the command-line procedure to reset the network parameters.  CLI instructions are posted HERE


Check the Enable NAT box, unless you are connecting the PBX directly to a static public IP address.  Click on the Change IP Address button.  Reboot the PBX server, either via the Reboot link on the UI, located under the Maintenance tab, or by pressing the Reset  button on the server.  If you use the UI link, there may be a delay of up to two minutes before the reboot sequence takes place.  After the PBX is fully rebooted, the network settings you entered will be active.  You will need to use the new IP information to log back into the server.


Forward ports in your router.  If you intend to connect the PBX to a nexMatrix or other provider’s SIP trunk, you must forward the SIP signaling port.  If you request support from nexMatrix for your PBX, you must also forward the SSH and HTTP ports.  Use your router’s port forwarding function to establish the following rules:  There are additional details on port forwarding HERE 



Sometimes, the default HTTP WAN port (80) is already in use on some networks, usually for remote access to another device.  You can assign any alternate port number, such as 8080, on the WAN side, as long as it connects to port 80 on the LAN side connection to the PBX.  The same is true with SSH port 22.  You cannot use an alternate port for SIP traffic, however.  You must assign port 5060 on both the WAN and LAN sides.  If you assign an alternate HTTP or SSH port, you must inform nexMatrix support so that this can be noted in the PBX licensing file.


Security Systems.  There are two levels of IP security on the Protel-LTS PBX.  By default, the Linux fail2Ban blocking system is turned on.  You may want to turn this off temporarily until you have established a SIP trunk connection and registered one or more IP phones to the PBX.  This will prevent these essential connections from being blocked during setup.  However, you are strongly advised to turn fail2Ban back on after working administratively in the PBX.  Go to the Security Systems link, under the Networking tab to start and stop the security features.



Once you have entered an active SIP trunk connection, that IP address will be automatically whitelisted when you restart fail2ban so that it will not be inadvertently blocked in the future.  You are encouraged to also whitelist IP addresses or CIDR ranges for your IP phones for the same reason.  These are not automatically added, so you will need to add them manually using the Whitelist IPs link under the Networking Tab.  In this example, every IP address in the range from 192.168.1.1 to .254 has been whitelisted, using a CIDR mask:



If you make new whitelist entries while the security services are running, you will need to stop and restart them for the whitelist to take effect.   The Firewall security system is not on by default.  If you turn this feature on, the PBX will not allow SIP registration from any IP address that has not been whitelisted.


If fail2ban blocks an IP address, it will be listed on the Block IPs page, under the Networking tab.  If you have difficulty registering an IP phone, this is the first place you should look, to see if the IP address has been blocked.  You can unblock any IP address by clicking on the X button next to its listing:


Setting a default DID and trunk.  You will be unable to proceed with any programming of the PBX dialplan until you enter at least one DID into the PBX and set up at least one trunk connection.  If you have an active SIP account with nexMatrix or other provider, you should enter that now.  If you do not yet have a SIP account, you can enter “dummy” information for now.


Enter your first DID.  Click on the Add/Delete DIDs link, under the DID Management tab.  Enter any phone number here.  This should be 10 digits, in any format – parentheses and dashes will be ignored.  You can enter one of your own phone numbers, a number associated with a SIP trunk, or even a dummy number, such as (123)456-7890. 


Create a trunk.  Click on the Add a nexMatrix SIP Trunk link, under the Trunks and Configurations tab.  If you have an active account from nexMatrix, enter the information provided from us.  If you don’t have a nexMatrix trunk, or if you will be creating a custom trunk but don’t know how to enter that yet, you can create a dummy trunk for now, using entries like this:





The account number, Primary softswitch, connection method and default caller ID fields are all required, the rest are optional. Click on New nexMatrix Trunk to create the trunk settings. 


You should now execute a PBX Reload.  This command is used all the time during PBX programming.  It is located in two places:  the first link under the Maintenance tab on the left navigation panel, or on the top menu bar by clicking on the grey PBX tab.


You are now ready to proceed with creating extension users, programming your dialplan, and registering end points.  You should contact your nexMatrix account manager to schedule your first orientation and training session.  Call 208-697-5808, or 855-639-6287.