#PBX freeswitch Configuration
These variables are important because configuration strings must be consistent across modules.
The following variables are set dynamically - calculated if possible by freeswitch - and are available to the config as
hostname local_ip_v4 local_mask_v4 local_ip_v6 switch_serial base_dir recordings_dir sound_prefix sounds_dir conf_dir log_dir run_dir db_dir mod_dir htdocs_dir script_dir temp_dir grammar_dir certs_dir storage_dir cache_dir core_uuid zrtp_enabled nat_public_addr nat_private_addr nat_type
bind_server_ip
only used for dialing. Can be an ip address, a dns name, or "auto". This determines an ip address available on this host to bind. If you are separating RTP and SIP traffic, you will want to have use different addresses where this variable appears. Used by: dingaling.conf.xml
<X-PRE-PROCESS cmd="set" data="bind_server_ip=54.152.177.149"/>external_rtp_ip Can be an one of: ip address: "12.34.56.78" a stun server lookup: "stun:stun.server.com" a DNS name: "host:host.server.com" where fs.mydomain.com is a DNS A record-useful when fs is on a dynamic IP address, and uses a dynamic DNS updater. If unspecified, the bind_server_ip value is used. Used by: sofia.conf.xml dingaling.conf.xml
<X-PRE-PROCESS cmd="set" data="external_rtp_ip=54.152.177.149"/>external_sip_ip Used as the public IP address for SDP. Can be an one of: ip address: "12.34.56.78" a stun server lookup: "stun:stun.server.com" a DNS name: "host:host.server.com" where fs.mydomain.com is a DNS A record-useful when fs is on a dynamic IP address, and uses a dynamic DNS updater. If unspecified, the bind_server_ip value is used. Used by: sofia.conf.xml dingaling.conf.xml
<X-PRE-PROCESS cmd="set" data="external_sip_ip=54.152.177.149"/>
SIP and TLS settings TLS versions valid options: sslv2,sslv3,sslv23,tlsv1,tlsv1.1,tlsv1.2 default: tlsv1,tlsv1.1,tlsv1.2
<X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1,tlsv1.1,tlsv1.2"/>TLS cipher suite default ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH The actual ciphers supported will change per platform. openssl ciphers -v 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH' Will show what is available in your verion of openssl.
<X-PRE-PROCESS cmd="set" data="sip_tls_ciphers=ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"/>Internal SIP Profile variables
<X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
<X-PRE-PROCESS cmd="set" data="internal_sip_port=5060"/>
<X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/>
<X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false"/>External SIP Profile varibles
<X-PRE-PROCESS cmd="set" data="external_auth_calls=false"/>
<X-PRE-PROCESS cmd="set" data="external_sip_port=5080"/>
<X-PRE-PROCESS cmd="set" data="external_tls_port=5081"/>
<X-PRE-PROCESS cmd="set" data="external_ssl_enable=false"/>Video Settings Setting the max bandwdith
<X-PRE-PROCESS cmd="set" data="rtp_video_max_bandwidth_in=1mb"/>
<X-PRE-PROCESS cmd="set" data="rtp_video_max_bandwidth_out=1mb"/>WebRTC Video Suppress CNG for WebRTC Audio
<X-PRE-PROCESS cmd="set" data="suppress_cng=true"/>Enable liberal DTMF
<X-PRE-PROCESS cmd="set" data="rtp_liberal_dtmf=true"/>Stock Video Avatars
<X-PRE-PROCESS cmd="set" data="video_mute_png=$${images_dir}/default-mute.png"/>
<X-PRE-PROCESS cmd="set" data="video_no_avatar_png=$${images_dir}/default-avatar.png"/>outbound_caller_id and outbound_caller_name The caller ID telephone number we should use when calling out. Used by: conference.conf.xml and user directory for default
<X-PRE-PROCESS cmd="set" data="outbound_caller_name=FreeSWITCH"/>
<X-PRE-PROCESS cmd="set" data="outbound_caller_id=0000000000"/>Inject delay between dtmf digits on send to help some slow interpreters (also per channel with rtp_digit_delay var
<param name="rtp-digit-delay" value="40"/>When calls are in no media this will bring them back to media when you press the hold button.
<param name="media-option" value="resume-media-on-hold"/>allow a call after an attended transfer go back to bypass media after an attended transfer.
set to "undef" to remove the User-Agent header
Too see avaiable codecs
show codecs
type,name,ikey
codec,G.711 alaw,CORE_PCM_MODULE
codec,G.711 ulaw,CORE_PCM_MODULE
codec,PROXY PASS-THROUGH,CORE_PCM_MODULE
codec,PROXY VIDEO PASS-THROUGH,CORE_PCM_MODULE
codec,RAW Signed Linear (16 bit),CORE_PCM_MODULE
codec,Speex,CORE_SPEEX_MODULE
codec,VP8 Video,CORE_VPX_MODULE
codec,VP9 Video,CORE_VPX_MODULEenable and control a watchdog on the Sofia SIP stack so that if it stops responding for the specified number of milliseconds, it will cause FreeSWITCH to crash immediately.
<param name="watchdog-enabled" value="no"/>
<param name="watchdog-step-timeout" value="30000"/>
<param name="watchdog-event-timeout" value="30000"/>TLS: disabled by default, set to "true" to enable
Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) --> TLS verify policy, when registering/inviting gateways with other servers (outbound) or handling inbound registration/invite requests how should we verify their certificate set to 'in' to only verify incoming connections, 'out' to only verify outgoing connections, 'all' to verify all connections, also 'subjects_in', 'subjects_out' and 'subjects_all' for subject validation. Multiple policies can be split with a '|' pipe
Certificate max verify depth to use for validating peer TLS certificates when the verify policy is not none
If the tls-verify-policy is set to subjects_all or subjects_in this sets which subjects are allowed, multiple subjects can be split with a pipe
xml <param name="tls-verify-in-subjects" value=""/>
TLS version default: tlsv1,tlsv1.1,tlsv1.2
TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH
When freeswitch gets a register packet it looks for the user in the directory based on the from or to domain in the packet depending on how your sofia profile is configured.
Out of the box the default domain will be the IP address of the machine running FreeSWITCH. This IP can be found by typing "sofia status" at the CLI.
You will register your phones to the IP and not the hostname by default. If you wish to register using the domain please open vars.xml in the root conf directory and set the default domain to the hostname you desire. Then you would use the domain name in the client instead of the IP address to register with FreeSWITCH.
See users registrations
show registrations