Configure SIP Gateway - Microsoft Teams (2023)

Table of Contents
In this article Verify that SIP Gateway is available for your organization Enable SIP Gateway for the users in your organization By using Teams admin center By using PowerShell Set the SIP Gateway provisioning server URL Using DHCP Manually Configure conditional access Provision and enroll SIP devices as common area phones How to sign in and sign out User pairing and sign-in Sign-out View and monitor SIP devices Restart a SIP device Sync policy changes to SIP devices to enforce policies Set a SIP device's UI language Supported languages Microsoft Teams and IPv6 Emergency calling Report problems to Microsoft Videos
  • Article
  • 11 minutes to read
  • Applies to:
    Microsoft Teams

This article explains how to configure SIP Gateway so that your organization can use compatible SIP devices with Microsoft Teams. To find out what SIP Gateway can do for your organization and what hardware, software, and licenses your organization needs for it, read Plan for SIP Gateway.

Before you can configure SIP Gateway, do the following:

The following sections describe what you must do as an administrator to configure SIP Gateway.

  • Verify that SIP Gateway is available for your organization.

  • Enable SIP Gateway for the users in your organization.

  • Set the SIP Gateway provisioning server URL.

This article also describes how to:

  • Enroll SIP devices either individually or in batches for your convenience.

  • View and monitor your SIP devices.

  • Enable support for a multi-language user interface.

Verify that SIP Gateway is available for your organization

  1. Sign in to the Teams admin center.

  2. At the left, select Teams devices and see if the SIP devices tab is visible. If it is, the SIP Gateway service is enabled for your organization.

    (Video) Microsoft Teams: Configuring a Polycom VVX phone to connect to Microsoft Teams via SIP Gateway

Enable SIP Gateway for the users in your organization

You can enable SIP Gateway for your organization in either of two ways: by using the Teams admin center, or by using a PowerShell cmdlet.

By using Teams admin center

To enable SIP Gateway in the Teams admin center, follow these steps:

  1. Go to the Teams admin center

  2. At the left, under Voice, select Calling policies.

  3. At the right under Manage policies, select the appropriate calling policy assigned to users or, if necessary, create a new calling policy and assign it to the required users.

    See Also
    Microsoft Sentinel data connectorsConnection String Syntax - ADO.NETGet clients for Microsoft Teams - Microsoft TeamsChange to Windows 10 Education from Windows 10 Pro - Windows Education

  4. Select Manage policies, select a policy, and then select Edit.

  5. Turn on the setting for SIP devices can be used for calls, and then select Save.

By using PowerShell

You can also enable SIP Gateway by using the PowerShell Set-CsTeamsCallingPolicy cmdlet. To enable users for SIP devices, select a policy, and set the -AllowSIPDevicesCalling attribute to True. The default value is False, so users will not be able to use their SIP devices unless you enable them.

Note

  • Policy propagation may take up to 24 hours.

Set the SIP Gateway provisioning server URL

You can set the SIP Gateway provisioning server's URL in your Dynamic Host Configuration Protocol (DHCP) server. Users who work remotely must configure it manually.

Using DHCP

For each SIP device, set one of the following SIP Gateway provisioning server URLs:

  • EMEA: http://emea.ipp.sdg.teams.microsoft.com
  • Americas: http://noam.ipp.sdg.teams.microsoft.com
  • APAC: http://apac.ipp.sdg.teams.microsoft.com

Add SIP devices to your Teams organization by configuring the above SIP Gateway provisioning server URL in your DHCP server. To learn more about DHCP server, see Deploy and manage DHCP. Also, you can use DHCP option 42 to specify the Network Time Protocol (NTP) server, and DHCP option 2 to specify the offset from Coordinated Universal Time (UTC) in seconds. The devices in your organization will be routed to the SIP Gateway provisioning server. Successfully provisioned SIP phones will display the Teams logo and a soft button for sign-in.

Ensure SIP devices are on the minimum supported firmware version for onboarding. During onboarding, SIP Gateway will push the default configuration and authentication user interface to the device. To find out the required firmware version for SIP devices, see Plan for SIP Gateway.

Manually

Users who work remotely must manually configure the provisioning server URL into their SIP device by using the following steps:

  1. Open Settings on the device and get the device's IP address.

  2. Open a browser window, enter the device’s IP address, log in (if necessary) and configure the provisioning server’s URL in the device's web utility.

  3. Under Settings or Advanced settings on the web utility, enter the provisioning server URL shown above.

Note

(Video) SIP Gateway Everything You Need To Know

  • Only compatible SIP devices can be onboarded to SIP Gateway.
  • Cisco IP phones must be flashed to multiplatform firmware before they can be onboarded. To learn how, see Cisco firmware conversion guide.
  • For Yealink phones, use option 66.
  • For Cisco, Poly, and AudioCode phones, use option 160.
  • For Cisco devices, append /$PSN.xml to the provisioning server URL.

Configure conditional access

Conditional Access is an Azure Active Directory (Azure AD) feature that helps ensure that devices that access your Microsoft 365 resources are properly managed and secure. SIP Gateway authenticates SIP devices with Azure AD, so if your organization uses Conditional Access for devices in the corporate network, it should exclude the following IP addresses:

  • North America:
    • East US: 52.170.38.140
    • West US: 40.112.144.212
  • EMEA region:
    • North EU: 40.112.71.149
    • West EU: 40.113.112.67
  • APAC region:
    • Australia East: 20.92.120.71
    • Australia Southeast: 13.73.115.90

For more information, see IP address ranges.

Provision and enroll SIP devices as common area phones

Note

A SIP device must be onboarded to SIP Gateway before it can be enrolled.

To streamline your tasks, you can enroll SIP devices in the Teams admin center either one at a time or in batches. Here's how:

  1. Log in to the Teams admin center.

  2. Select Teams devices > SIP devices.

  3. At the upper right, select Actions > Provision devices and follow one of these steps:

  • To provision one device:

    See Also
    Plan Direct Routing - Microsoft TeamsPlan and implement SharePoint site navigation - SharePoint in Microsoft 365Security guide for Microsoft Teams overview - Microsoft Teams

    a. Under Waiting on activation, select Add.

    b. On the Add MAC addresses pane, enter the MAC address and Location of the device, and then select Apply.

    c. Under Waiting on activation, select the device you just added, and then select Generate verification code.

    d. On the Provision devices pane, under Verification code, note the verification code for the SIP device.

  • To provision many devices:

    a. Under Waiting on activation, at the right, select Export (the Microsoft Excel icon).

    b. On the Provision devices pane, under Upload multiple MAC addresses, select download a template.

    c. Save Template_Provisioning.csv to your computer and fill in the MAC id and Location fields.

    d. On the Provision devices pane, select Upload multiple MAC addresses.

    e. At the right on the Upload MAC addresses pane, select Select a file, and select the Template_Provisioning.csv file that contains your data.

    (Video) How to set up Yealink T30P SIP Phone connected to Ms Teams

    f. On the Provision devices pane, under Waiting on activation, select a device and then select Generate verification code to generate a one-time verification code for each provisioned device. Note the verification code for each SIP device.

  1. On the SIP device, dial the enrollment feature code followed by the verification code. On the SIP device, dial the enrollment feature code *55* (used by SIP Gateway for enrollment one-time-verification code validation), followed by the verification code that is generated in Teams Admin Center for this particular device. For example, if the verification code is 123456, dial *55*123456 to enroll the device.

  2. On the Provision devices pane, under Waiting for sign in, select Signed out.

  3. In the Sign in a user dialog, copy or note the SIP device's pairing code.

  4. Go to https://microsoft.com/devicelogin, and under Enter code, enter the SIP device's pairing code, and then select Next.

  5. On the Microsoft Sign in page, in the Email or phone field, enter the email address for the SIP device, and then select Next.

  6. On the Password page, enter the password for the email address for the SIP device, and then select Sign in.

  7. On the Are you trying to sign in to Teams SIP devices gateway page, select Continue.

How to sign in and sign out

Only local sign-in is supported for users’ personal devices. To sign out a device from the Admin center, follow these steps:

  1. Log in to the Teams admin center.

  2. Select Teams devices > SIP devices.

  3. At the right, select a SIP device, and then select Sign out.

User pairing and sign-in

To pair a SIP device after the user authenticates using corporate credentials, a user must:

  1. Press Sign-in on the SIP phone to display the authentication URL and pairing code. The pairing code is time-sensitive. If it expires, the user must press Back on the phone and start the sign-in process again.

  2. Navigate to the authentication URL on the user's desktop or mobile browser and use corporate credentials to log in.

  3. Enter the pairing code displayed on the SIP phone into the web authentication app to pair the SIP phone with the user's account. On a successful sign-in, which might take a while, the SIP phone will display the phone number and username, if the device supports it.

Note

The location of the device shown on the Azure Active Directory web authentication app is the SIP Gateway datacenter to which the device is connected. SIP phones in scope are not OAuth-capable, so SIP Gateway authenticates the user through the web authentication app and then pairs the device with the user’s credentials. Learn more here: Microsoft identity platform and the OAuth 2.0 device authorization grant flow.

Sign-out

To sign out, a device user can:

(Video) Microsoft SIP Gateway

  • Press Sign-Out on the SIP device and follow the steps described on the device.

To sign out a device on the Teams admin center:

  1. Log in to the Teams admin center.

  2. Select Teams devices > SIP devices.

  3. At the right, in the SIP devices pane, select the device.

  4. On the device's Details pane, select the Details tab, and at the upper right on the Actions menu, select Sign out.

View and monitor SIP devices

You can view and monitor your SIP device inventory in the Teams admin center after the devices' users sign in at least once. Here's how:

  1. Log in to the Teams admin center.

  2. Select Teams devices > SIP devices. All signed-in SIP devices are listed on the right.

Restart a SIP device

  1. Log in to the Teams admin center.

  2. Select Teams devices > SIP devices.

  3. On the right, select the SIP device that you want to restart, and then select Restart.

Note

  • Removing a SIP device from your tenant is currently unavailable in the Teams admin center.
  • Command execution depends on device availability, and it may not match the execution status shown in the Teams admin center. If you try to enable SIP gateway on a device that doesn't support it, the command won't be executed.

Sync policy changes to SIP devices to enforce policies

User details and policies will be fetched to SIP devices when users sign in. Any policy changes thereafter for signed-in users will be synced to the device within one hour. Devices must have their registration refreshed with the SIP Gateway periodically. SIP phones depend on Call Redirect, so the admin must set the AllowCallRedirect attribute in Set-CsTeamsCallingPolicy to Enabled.

Set a SIP device's UI language

A SIP device can usually display information in many languages. Setting its UI language affects its interface, including softkeys and sign-in/sign-out system messages. Setting the UI language is done in the provisioning server, using DHCP server, or manually by appending a code string in the URL as in the following examples.

How to set German for Polycom, AudioCodes, and Yealink phones:

  • http://emea.ipp.sdg.teams.microsoft.com/lang_de

How to set Japanese for Cisco phones:

  • http://emea.ipp.sdg.teams.microsoft.com/lang_ja/$PSN.xml

Supported languages

Language nameLanguage code]
English (default)en
Spanishes
Japaneseja
Germande
Frenchfr
Portuguesept

Note

  • Japanese is not supported by Yealink and partially supported by Polycom VVX.
  • The system defaults to English if the selected language is not supported by the SIP endpoint.
  • When the lang_xx parameter is not set via the provisioning URL, English is used as the default language.
  • If Sign in to make an emergency call text is not translated to other languages, an abbreviated version in English only will be presented on Press Sign In on the following IP phone models due to a screensize limitations:
    • Poly VVX 150, VVX 201
    • Cisco CP-6821, CP-7811, CP-7821, CP-7841, CP-7861
    • Voice mail softkey label is hardcoded with VM text across all languages for Poly VVX because of a limitation of string length.

Microsoft Teams and IPv6

SIP Gateway only supports IPv4. Microsoft Teams service and client support both IPv4 and IPv6. If you want to control communications to Microsoft Teams, use the IP address ranges in Microsoft 365 URLs and IP address ranges.

(Video) ☕️Tech⚙️📱How-To Poly Rove DECT Microsoft Teams SIP Gateway

Emergency calling

SIP Gateway supports dynamic emergency calling (dynamic E911) for compatible SIP devices that share network attributes over the wire. These attributes are provisioned in the Teams admin center and can be a combination of local IP and subnet length, or chassis ID and network port number. For devices that do not share location attributes, or if the location is not resolved dynamically for any reason, SIP Gateway will continue to support emergency calling based on registered addresses. Currently, registered addresses are not supported for Direct Routing scenarios. For more information about emergency calling, see Plan and manage emergency calling.

Report problems to Microsoft

To report problems, contact Microsoft Support.

Videos

1. How Teams SIP Gateway can save your Skype for Business Online IP Phone Investment
(Commsverse)
2. Microsoft Teams integration with SIP Trunk
(australianphone)
3. How To Successfully integrate SIP Endpoints with Microsoft Teams
(CyberData Corporation)
4. Konfiguration des SIP-Gateways | So verwendest Du SIP-Geräte über Microsoft Teams
(TECHTEL)
5. How does it work? skyTeams Gateway | Microsoft Teams and H323/SIP videoconference systems.
(go Facing)
6. Microsoft Teams PBX Integration
(AeroCom Inc)
Top Articles
Latest Posts
Article information

Author: Eusebia Nader

Last Updated: 04/03/2023

Views: 6161

Rating: 5 / 5 (80 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Eusebia Nader

Birthday: 1994-11-11

Address: Apt. 721 977 Ebert Meadows, Jereville, GA 73618-6603

Phone: +2316203969400

Job: International Farming Consultant

Hobby: Reading, Photography, Shooting, Singing, Magic, Kayaking, Mushroom hunting

Introduction: My name is Eusebia Nader, I am a encouraging, brainy, lively, nice, famous, healthy, clever person who loves writing and wants to share my knowledge and understanding with you.