iPhone Wi-fi calling firewall rules

[studerje1]

It appears that the wi-fi calling feature that has finally rolled out for iPhones with iOS 9.3 will require some firewall changes for corporate firewalls.

It looks like the feature establishes a per app vpn for the calling feature. IPsec and ike protocols appear to be in use.

I'm hoping to find documentation from Verizon on what ports and addresses to enabled for this feature.

Can anyone point me in the right direction?

[vortix]

For what it's worth, I only observed outbound network activity on port 500 going to IPs with the following pattern:

141.207.*.232

Perhaps other IPs that don't strictly follow this pattern are used outside North America?  Also not clear on when port 4500 is used vs 500 (I've only seen outbound connections on port 500).

It seems that the best way to get an official document from Verizon would be for someone to reach out to their VZW Enterprise account rep.  VZW should be happy to share this information, as it would result in better coverage inside buildings and it would prevent Verizon from spending money on repeaters that they often place inside buildings.

[studerje1]

vortix we have also only seen outbound connections on port 500 to 141.207.*.232.

I had originally tried reaching out to Verizon around the time I started this thread, but I never got a response. I'm going to try again this week.

[Chadi3rown]

Any updates on this ? I dmz'd my cell phone , instant connect lol ...

[MrJeff01]

I found some stuff here:

Unblock Ports / IP Addresses - Verizon Wireless Network Extender | Verizon Wireless

I believe as stated above and from testing that UDP/500 and UDP/4500 are what are used for "WiFi Calling". That page has a list of all ports/IPs the wireless extenders use..

I know its late and an old post but maybe this will help someone..

-Jeff

[VZWh8r4life]

Such a garbage. FYI NTP needs to be allowed.