Yeastar Security Configuration: 2FA, IP Allowlist & Toll Fraud Prevention

Overview

Every customer PBX should have 2FA on the administrator account, an IP restriction on the admin portal and outbound call restrictions to prevent toll fraud. This guide covers all three.

Steps to Enable 2FA for the Administrator Account

1. Log in to the PBX web portal with the super administrator account.
2. Click your account at the top-right corner, then go to Change Password & Security > Security Settings.
3. Select the Two-Factor Authentication checkbox and enter your password.
4. Choose Authenticator or Email and complete the setup.
5. Click Save.

Steps to Restrict Admin Portal Access by IP

1. Go to Security > Security Settings > Security Options.
2. Turn on Enable IP Restriction for Administrator Login.
3. Add your own IP first, then the partner and customer office IPs (IP and subnet mask).
4. Click Save. The restriction applies from the next login.

Steps to Prevent Toll Fraud

1. Block international calls: go to Security > Security Settings > Allowed Country Codes, turn on Enable Allowed Country/Region Code Dialing Protection, set the International Dialing Code to 0011, and allow only countries the customer needs.
2. Limit call frequency: go to Security > Security Rules > Outbound Call Frequency Restriction and add or review rules.
3. Apply per extension: in Extension and Trunk > Extension, edit the extension, open the Security tab and select the rule under Call Restrictions.
4. Limit concurrent calls: edit the trunk, open the Advanced tab and set Maximum Concurrent Calls.

Key Notes