Setup Asterisk SIP

1. **Settings -> Asterisk SIP Settings -> SIP Settings [chan_pjsip] :
   • TLS/SSL/SRTP Settings
     • Certificate Manager: Let's Encrypt certificate generated from the Web UI
     • Transports: Yes for 0.0.0.0 - All for udp, tcp, & tls
   • **0.0.0.0 (udp):
     • **Port to Listen On: ** 5621
     • Domain the transport comes from: pbx.supernets.org
   • **0.0.0.0 (tcp):
     • **Port to Listen On: ** 5620
     • Domain the transport comes from: pbx.supernets.org
   • **0.0.0.0 (tls):
     • **Port to Listen On: ** 5623
     • Domain the transport comes from: pbx.supernets.org

---

Enable text messages:

1. nano /etc/asterisk/extensions_custom.conf:

[astsms]
exten => _.,1,MessageSend(pjsip:${EXTEN},${MESSAGE(from)})
 same => n,Hangup()

2. Restart the service: fwconsole reload

---

Create a Group

1. Admin -> User Manager -> Groups -> PBX Internal Directory -> ADD: SuperNETs

---

Create an extension:

1. **Connectivity -> Extensions -> Add Extension -> Add New SIP [chan_pjsip] Extension:
   • General
     • User Extension = 1337
     • Display Name = acidvegas
     • Secret = CHANGE ME
     • Link to a Default User: Create New User
     • Groups: All Users, Custom Group Name Here
   • Voicemail
     • Enabled: yes
     • Voicemail Password: CHANGE ME
     • Disable (*) in Voicemail Menu: Yes
   • Advanced
     • Media Encryption: SRTP via in-SDP (recommeded)
     • Direct Media: No (Keep user IP addresses private)
     • Message Context: astsms

---

Create a conference extension:

1. **Applications -> Conferences -> Add

Extra scratch notes

Caller-id sources? Feature codes (custom star codes)

learn groups and directories for separation

applications, cert manager, generate lesudo nano /etc/asterisk/pjsip_custom.conf

or

sudo nano /etc/asterisk/pjsip.transports_custom.conf

[0.0.0.0-tls]
cert_file=/etc/letsencrypt/live/sip.supernets.org/fullchain.pem
priv_key_file=/etc/letsencrypt/live/sip.supernets.org/privkey.pem
method=tlsv1

or.

pjsip.transports.conf

[0.0.0.0-tls]
type=transport
protocol=tls
bind=0.0.0.0:5263
external_media_address=209.141.41.57
external_signaling_address=209.141.41.57
ca_list_file=/etc/ssl/certs/ca-certificates.crt
cert_file=/etc/letsencrypt/live/sip.supernets.org/fullchain.pem
priv_key_file=/etc/letsencrypt/live/sip.supernets.org/privkey.pem
method=sslv23
verify_client=no
verify_server=no
allow_reload=no
tos=cs3
cos=3
local_net=209.141.41.0/24