How to use IP authentication with a Sub Account

All the traffic that comes and goes through the Internet is susceptible to threats since there is always someone trying to find vulnerabilities on systems to take advantage of them and get benefits from any information they can steal. Although in recent times, several tools and software like antiviruses and firewalls that help users protect their system and network from these threats, it is definitely worth the time to look for further alternatives to add extra layers of security and when speaking of VoIP services, this is no exception. In this article we will explain how to set up a very useful tool to restrict the use of your VoIP.ms SIP accounts and add more security to your service.

What is IP authentication and how it works?

Authentication is a must on any service offered over the internet, even for free services. Therefore, taking care of your username and password is vital to keep your data safe. In the same manner, IP authentication is a great alternative security method to protect the integrity of your service with the difference that this will not rely on a password but on a specific public IP address.

Unlike the traditional user/password authentication, this method will make the server not require a password from the client to authorize a request coming from this. Instead, the server will verify if such invite is coming from a specific public IP, previously declared. For this, the user will define what is the IP address authorized and the server will allow requests from that IP exclusively. Otherwise, any other requests will be rejected even if the username is correct. In other words, no one outside your network will be able to make use of your username.

How to use IP Authentication with VoIP.ms?

In VoIP.ms we understand how important the integrity of your SIP accounts is to prevent unauthorized use of your balance. For this reason, apart from user/password authentication you are able to create SIP accounts that can make calls only from the IP address of your choice. To add one all you need to need to do is head to the “Sub Accounts” menu in your Customer Portal and click on the “Create Sub Account” option. On this page, you can assign the username and select the authentication method that this SIP account will use. Once you select “Static IP” for the option “Authentication type” you will be able to enter the WAN IP address of the network your calls will be made from. With this done, the Voip.ms servers will not allow invites from this username if they are not coming from the specified IP address.

For more information about how to create a sub account check this link: [[1]]

Once the Sub account is set up to use IP authentication, you will configure your VoIP device or system in the same way you do when using password authentication, however, you will omit the password since as mentioned, the server will not ask for one when receiving invites from this username. The calls of these Sub Account will be allowed as long as they come from the specified IP address.

Benefits of using a Static IP for authentication

• You do not have to worry about forgetting your password.

• Calls from unauthorized networks will not be allowed.

• You will have full control over the traffic that is sent and received from/to your SIP accounts.

Things to consider when using IP Authentication

• You must have a static public IP address.

• This Authentication type is not available for IAX2 protocol.

• Accounts using IP authentication do not display registration status on our Customer Portal because they do not register in the server. This will simply allow and send the invites to the authorized IP address.

Final thoughts

IP authentication is a great alternative to add an extra layer of security to your system, however, this does not mean password authentication is not safe or that IP authentication will give you all the protection you need, it is simply another tool handy in order to strengthen your infrastructure security. Please bear in mind that your system may still be vulnerable to threats within your network, therefore, always make sure to have your system and network well protected with all means possible to prevent unauthorized use of your system or devices.

For more security recommendations you can refer to these Wiki articles:

https://wiki.voip.ms/article/General_Security

https://wiki.voip.ms/article/PBX_Security

If you have any question about this topic do not hesitate to contact our Support team via Live Chat or email them to [email protected].