Some of the most common VoIP issues involve the blocking of TCP and UDP ports. Ports are the addresses employed on the Transport Layer of the OSI model that are used on a device to distinguish between applications and services. Various voice services use specific ports to function. If these ports are blocked at any point between the communicating devices, voice services may fail partially or completely. Depending on what ports are blocked, different functionalities of VoIP will be affected.
The location on the network where ports are most commonly blocked is at the network edge; that is, the point where the enterprise network meets the ISP (internet service provider) and the internet. At this location, there may be several mechanisms being employed such as access lists, firewall rules, or network address translation (NAT) that may be responsible for blocking ports. These services are all vital to the functionality and security of a network; however, they can also be the cause of VoIP failure.
Access lists (ACLs) – ACLs are rules found on the edge device of an enterprise network (a router or a firewall) that block or allow packets based on their source and destination IP addresses and ports. If ports that VoIP services require are blocked, then calls or registration may fail.
Firewall rules – Firewall rules go one or more steps beyond simple ACLs. Firewalls are able to inspect each packet that attempts to enter the enterprise network and to decide, based on specific security policies, which packets will be allowed, and which won’t. Other than source and destination IP addresses and ports, firewalls can look deeper into a packet and determine if it is safe to let the packet through or not. If a firewall is not configured to allow voice services to pass, a failure can occur.
Network address translation (NAT) – NAT has been the great deliverer when it comes to delaying the inevitable exhaustion of IPv4 addresses. By providing a translation from internal private IP addresses to external public IP addresses, it allows for the reuse of IP addresses within enterprise networks without any danger of conflict, thus giving several more years of life to the IPv4 addressing scheme. At the same time, it can be a nightmare for VoIP as it often causes problems with voice calls, especially those that are initiated from the outside. Elaborate best practices have been devised and have even been written up in an RFC to define NAT traversal practices for SIP-based voice communications.