https://wiki.securepoint.de/index.php?action=history&feed=atom&title=UTM%2FVoIP_BestPractice
UTM/VoIP BestPractice - Versionsgeschichte
2026-05-28T12:42:15Z
Versionsgeschichte dieser Seite in Securepoint Wiki
MediaWiki 1.43.5
https://wiki.securepoint.de/index.php?title=UTM/VoIP_BestPractice&diff=98636&oldid=prev
Lauritzl: 1 Version importiert
2025-09-11T15:41:17Z
<p>1 Version importiert</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<tr class="diff-title" lang="de">
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">Version vom 11. September 2025, 17:41 Uhr</td>
</tr><tr><td colspan="2" class="diff-notice" lang="de"><div class="mw-diff-empty">(kein Unterschied)</div>
</td></tr></table>
Lauritzl
https://wiki.securepoint.de/index.php?title=UTM/VoIP_BestPractice&diff=98635&oldid=prev
Lauritzl am 11. September 2025 um 13:31 Uhr
2025-09-11T13:31:14Z
<p></p>
<p><b>Neue Seite</b></p><div>{{Set_lang}}<br />
<br />
{{#vardefine:headerIcon|spicon-utm}}<br />
{{:UTM/VoIP_BestPractice.lang}}<br />
{{Rollout|VoIP}}<br />
<br />
</div><div class="new_design"></div>{{Select_lang}}{{TOC2}}<br />
{{Header|09.2025|new=true<br />
}}<br />
----<br />
=== Vorbemerkung ===<br />
<div class="einrücken"><br />
{{#var:Vorbemerkung--desc}}<br />
<br clear=all></div><br />
<br />
{{h3|{{#var:Beispielszenario 1--cap}}|{{#var:Beispielszenario 1}}: {{#var:Beispielszenario 1--cap}} }}<br />
<div class="einrücken"><br />
{{Bild| {{#var:Beispielszenario 1--Bild}} |class=right noborder ml2em}}<br />
<div style="padding-top:2.5em;"><br />
<div>{{#var:Beispielszenario 1--desc}}</div><br />
{{Gallery3<!--|einblenden={{#var:step-by-step}}|ausblenden={{#var:hide}}|collapsed=true|layout=bigdezent|Vorschau=step-by-step.png--><br />
|{{#var:Router Netzwerkobjekt--Bild}}|{{#var:Router Netzwerkobjekt--cap}}|Abb1-header={{Dialog-header|{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Regelgruppe VoIP--Bild}}|{{#var:Regelgruppe VoIP--cap}}|Abb2-header={{Dialog-header|{{#var:Regelgruppe hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|{{#var:Paketfilter internal-network router--Bild}}|{{#var:Paketfilter internal-network router--cap}}{{#var:Regel-Gruppen Hinweis}}|Abb3-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Paketfilter router internal-network--Bild}}|<ul>{{#var:Paketfilter router internal-network--cap}}{{#var:Regel-Gruppen Hinweis}}</ul>|Abb4-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|Abb=true|i=2| class=mw-bild}}<br />
<br />
<br />
==== {{#var:Übersicht der Regeln}} ====<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1"<br />
|- class="bold small"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || class=mw12 | {{#var:Quelle}} || class=mw12 | {{#var:Ziel}} || class=mw12 | {{#var:Dienst}} || class=mw6 | NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} || class=mw5 | <br />
<br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 1 || {{spc|network|o|-}} internal-network || {{spc|host|o|-}} Router || {{spc|other|o|-}} any || {{Kasten|HNE|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}3)<br />
<br />
|-<br />
| class="bc__default" | {{#var:Zugriff auf IPSec-Netzwerk--desc}} || {{spc|drag|o|-}} || 2 || {{spc|host|o|-}} Router || {{spc|network|o|-}} internal-network|| {{spc|other|o|-}} any || || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}4)<br />
<br />
|}<br />
<br clear=all></div><br />
----<br />
<br />
{{h3|{{#var:Beispielszenario 2--cap}}|{{#var:Beispielszenario 2}}: {{#var:Beispielszenario 2--cap}} }}<br />
<div class="einrücken"><br />
{{Bild| {{#var:Beispielszenario 2--Bild}} |class=right noborder ml2em}}<br />
<!-- <li class="list--element__alert list--element__warning">{{#var:Beispielszenario 2--Hinweis1}}</li> --><br />
<div style="padding-top:0.5em; padding-bottom:1.1em;">{{Hinweis-box| {{#var:Beispielszenario 2--Hinweis1}} | class=flex mw20}}</div><br />
<li class="list--element__alert list--element__positiv">{{#var:Beispielszenario 2--Hinweis2}}</li><br />
</div><br clear=all><br />
{{h4|{{#var:Beispielszenario 2a-cap}}|{{#var:Beispielszenario 2}}a: {{#var:Beispielszenario 2a-cap}} }}<br />
<div class="einrücken"><br />
{{Gallery3 |{{#var:TK-Anlage Netzwerkobjekt external--Bild}}|{{#var:TK-Anlage Netzwerkobjekt--cap}}|Abb1-header={{Dialog-header|{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Regelgruppe VoIP--Bild}}|{{#var:Regelgruppe VoIP--cap}}|Abb2-header={{Dialog-header|{{#var:Regelgruppe hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|{{#var:Paketfilter internal-network TK-Anlage--Bild}}|{{#var:Paketfilter internal-network TK-Anlage--cap}}{{#var:Regel-Gruppen Hinweis}}|Abb3-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Paketfilter TK-Anlage internal-network--Bild}}|<ul>{{#var:Paketfilter TK-Anlage internal-network--cap}}{{#var:Regel-Gruppen Hinweis}}</ul>|Abb4-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|Abb=true|i=2}}<br />
<li class="list--element__alert list--element__hint">{{#var:Route auf Telefonanlage--Hinweis}}</li><br />
===== {{#var:Übersicht der Regeln}} =====<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1"<br />
|- class="bold small"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || class=mw12 | {{#var:Quelle}} || class=mw12 | {{#var:Ziel}} || class=mw12 | {{#var:Dienst}} || class=mw6 | NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} || class=mw5 | <br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 2 || {{spc|network|o|-}} internal-network || {{spc|host|o|-}} TK-Anlage || {{spc|other|o|-}} any || {{Kasten|HNE|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}3)<br />
|-<br />
| class="bc__default" | {{#var:Zugriff auf IPSec-Netzwerk--desc}} || {{spc|drag|o|-}} || 4 || {{spc|host|o|-}} TK-Anlage || {{spc|network|o|-}} internal-network|| {{spc|other|o|-}} any || || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}4)<br />
|}<br />
</div><br />
<br />
{{h4|{{#var:Beispielszenario 2b-cap}}|{{#var:Beispielszenario 2}}b: {{#var:Beispielszenario 2b-cap}} }}<br />
<div class="einrücken"><br />
{{#var:Beispielszenario 2b--desc}}<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1"<br />
|- class="bold small"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || class=mw12 | {{#var:Quelle}} || class=mw12 | {{#var:Ziel}} || class=mw12 | {{#var:Dienst}} || class=mw6 | NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} || class=mw5 | <br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 1 || {{spc|network|o|-}} internal-network || {{spc|host|o|-}} Router || {{spc|other|o|-}} any || {{Kasten|HNE|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}3)<br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 2 || {{spc|network|o|-}} internal-network || {{spc|host|o|-}} TK-Anlage || {{spc|other|o|-}} any || {{Kasten|HNE|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}3)<br />
|-<br />
| class="bc__default" | {{#var:Zugriff auf IPSec-Netzwerk--desc}} || {{spc|drag|o|-}} || 3 || {{spc|host|o|-}} Router || {{spc|network|o|-}} internal-network|| {{spc|other|o|-}} any || || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}4)<br />
|-<br />
| class="bc__default" | {{#var:Zugriff auf IPSec-Netzwerk--desc}} || {{spc|drag|o|-}} || 4 || {{spc|host|o|-}} TK-Anlage || {{spc|network|o|-}} internal-network|| {{spc|other|o|-}} any || || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}4)<br />
|}<br />
</div><br />
----<br />
<br />
{{h3|{{#var:Beispielszenario 3--cap}}|{{#var:Beispielszenario 3}}: {{#var:Beispielszenario 3--cap}} }}<br />
<div class="einrücken"><br />
{{Bild| {{#var:Beispielszenario 3--Bild}} |class=right noborder ml2em}}<br />
<div style="padding-top:2.5em;">{{#var:Beispielszenario 3--desc}}</div><br />
{{Gallery3<!--|einblenden={{#var:step-by-step}}|ausblenden={{#var:hide}}|collapsed=true|layout=bigdezent|Vorschau=step-by-step.png--><br />
|{{#var:TK-Anlage Netzwerkobjekt--Bild}}|{{#var:TK-Anlage Netzwerkobjekt--cap}}|Abb1-header={{Dialog-header|{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Regelgruppe VoIP--Bild}}|{{#var:Regelgruppe VoIP--cap}}|Abb2-header={{Dialog-header|{{#var:Regelgruppe hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|{{#var:Paketfilter Internet Tk-Anlage any--Bild}}|{{#var:Paketfilter Internet Tk-Anlage any--cap}}{{#var:Regel-Gruppen Hinweis}}|Abb4-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Paketfilter Tk-Anlage Internet sip--Bild}}|<ul>{{#var:Beispielszenario 3-Paketfilter sip--Hinweis}}{{#var:Paketfilter Tk-Anlage Internet sip--cap}}{{#var:Regel-Gruppen Hinweis}}</ul>|Abb3-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|Abb=true|i=2}}<br />
==== {{#var:Übersicht der Regeln}} ====<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1"<br />
|- class="bold small"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || class=mw12 | {{#var:Quelle}} || class=mw12 | {{#var:Ziel}} || class=mw12 | {{#var:Dienst}} || class=mw6 | NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} || class=mw5 | <br />
<br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 2 || {{spc|host|o|-}} TK-Anlage || {{spc|internet|o|-}} internet || {{spc|other|o|-}} any || {{Kasten|HN|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}3)<br />
<br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 1 || {{spc|host|o|-}} TK-Anlage || {{spc|internet|o|-}} internet || {{spc|udp|o|-}} sip || {{Kasten|HN|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}4)<br />
<br />
|}<br />
<br clear=all></div><br />
----<br />
<br />
{{h3|{{#var:Beispielszenario 4--cap}}|{{#var:Beispielszenario 4}}: {{#var:Beispielszenario 4--cap}} }}<br />
<div class="einrücken"><br />
{{Bild| {{#var:Beispielszenario 4--Bild}} |class=right noborder ml2em}}<br />
<div style="padding-top:2.5em;">{{#var:Beispielszenario 4--desc}}</div><br />
{{Gallery3<!--|einblenden={{#var:step-by-step}}|ausblenden={{#var:hide}}|collapsed=true|layout=bigdezent|Vorschau=step-by-step.png--><br />
|{{#var:TK-Anlage Netzwerkobjekt--Bild}}|{{#var:TK-Anlage Netzwerkobjekt--cap}}|Abb1-header={{Dialog-header|{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Regelgruppe VoIP--Bild}}|{{#var:Regelgruppe VoIP--cap}}|Abb2-header={{Dialog-header|{{#var:Regelgruppe hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|{{#var:Paketfilter Tk-Anlage Internet sip--Bild}}|{{#var:Beispielszenario 4-Paketfilter sip--Hinweis}}{{#var:Paketfilter Tk-Anlage Internet sip--cap}}{{#var:Regel-Gruppen Hinweis}}|Abb3-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|{{#var:Paketfilter Internet Tk-Anlage any--Bild}}|<ul>{{#var:Paketfilter Internet Tk-Anlage any--cap}}{{#var:Regel-Gruppen Hinweis}}</ul>|Abb4-header={{Dialog-header|{{#var:Regel hinzufügen}}|Firewall|{{#var:Paketfilter}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|Abb=true|i=2}}<br />
==== {{#var:Übersicht der Regeln}} ====<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1"<br />
|- class="bold small"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || class=mw12 | {{#var:Quelle}} || class=mw12 | {{#var:Ziel}} || class=mw12 | {{#var:Dienst}} || class=mw6 | NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} || class=mw5 | <br />
<br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 1 || {{spc|host|o|-}} TK-Anlage || {{spc|internet|o|-}} internet || {{spc|udp|o|-}} sip || {{Kasten|HN|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}3)<br />
<br />
|-<br />
| class="bc__default" | {{#var:IPSec-Regel-external-interface--desc}} || {{spc|drag|o|-}} || 2 || {{spc|host|o|-}} TK-Anlage || {{spc|internet|o|-}} internet || {{spc|other|o|-}} any || {{Kasten|HN|blau}} || {{Logging-Slider}} || {{Kasten|ACCEPT|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||class=fas fa-chart-bar icon|fs=14}}{{Button||copy|fs=14}}{{Button||w|fs=14}}{{Button||trash|fs=14}}<br />
| class=noborder | ({{#var:Abb}}4)<br />
<br />
|}<br />
<br clear=all></div></div>
Lauritzl