Microsoft Teams Direct Routing IP Addresses

Posted by     "Erwin Bierens" on Wednesday, October 21, 2020

When using your own SIP Trunk (BYOT) in combination with a SBC to setup Direct Routing to Microsoft Teams you will need to make some firewall rules. You can find the up to date IP addresses in belows chapters.

This will only be for Microsoft 365, Office 365, and Office 365 GCC tenants.

Signaling IPs

When configuring Direct Routing you will need to setup 3 FQDNs for signaling.

  • sip.pstnhub.microsoft.com
  • sip2.pstnhub.microsoft.com
  • sip3.pstnhub.microsoft.com

The first one will be located by location and performance metrics. If your location is EMEA, you 2nd location will be US and the 3th ASIA.

Primary DC sip.pstnhub.microsoft.com EMEA NOAM ASIA
Secondary DC sip2.pstnhub.microsoft.com US EU US
Tertiary DC sip3.pstnhub.microsoft.com ASIA ASIA EU

These FQDN’s resolve to the following IP Addresses:

  • 52.114.148.0
  • 52.114.132.46
  • 52.114.75.24
  • 52.114.76.76
  • 52.114.7.24
  • 52.114.14.70
  • 52.114.16.74 (NEW)
  • 52.114.20.29 (NEW)

If your firewall supports DNS names you can use the following FQDN, this one resolves all above addresses.

    sip-all.pstnhub.microsoft.com

Media IPs

When we talk about media ports (not in media Bypass mode) the following ranges are used. Media is using a serparate service in the Microsoft cloud, these are called Media Processors.

Locations where both SIP proxy and media processor components deployed:

  • US (two in US West and US East datacenters)
  • Europe (Amsterdam and Dublin datacenters)
  • Asia (Singapore and Hong Kong datacenters)

Locations where only media processors are deployed (SIP flows via the closest datacenter listed above):

  • Japan (JP East and West datacenters)
  • Australia (AU East and Southeast datacenters)

The following ranges are being used:

  • 52.112.0.0/14
  • 52.120.0.0/14 (NEW)


comments powered by Disqus