SCOPLINK-UPA Activation Requirements and Configuration

Purpose

This document describes the technical requirements and configuration settings required to activate the SCOPLINK-UPA collaboration application on a SCOPTEL platform.

SCOPLINK UPA relies on PJSIP, WebRTC, DTLS, and the HTTP and HTTPS services of the telephony module. All requirements described below must be configured before deploying the application to users.

System Requirements

The platform must meet the following minimum requirements:

Before proceeding, verify that the system is up to date and that the installed API versions meet or exceed these requirements.

Enable the PJSIP Protocol

The PJSIP protocol must be enabled on the SCOPTEL platform.

SCOPLINK UPA uses PJSIP to establish and manage telephony communications. A configuration using only the legacy SIP channel driver will not support the complete functionality of the application.

After enabling PJSIP, verify that the telephony services are running properly and that no related errors are present in the system logs.

4. Firewall Configuration

In the SCOPTEL firewall configuration, access the following option:

Add or allow the following TCP ports using the Service Drop List.

Port 8089/TCP is especially important for secure WebRTC communications using WSS and DTLS.

The firewall rules must allow connections from the networks or IP addresses used by the workstations running SCOPLINK UPA.

When the application is used remotely, the perimeter firewall rules, NAT configuration, and security policies must also allow access to these ports.

Extension Configuration

For each extension that will use SCOPLINK UPA:

1. Open the extension configuration.
   
2. Enable the ScopLINK-UPA option.

Enable HTTP and HTTPS Services

In the SCOPTEL administration interface:

1. Open the Telephony Module tab.
2. Locate the HTTP server settings.
3. Enable the HTTP Server option.
4. Enable the HTTPS option.
5. Save the changes.
6. Restart or reload the applicable services when required.

The HTTP server allows Asterisk and SCOPLINK UPA to use the WebSocket connections required for WebRTC.

HTTPS is strongly recommended and is generally required for secure WebRTC connections.

Service Validation

Before activating user accounts, verify the following:

• Rocky Linux 8 is installed.
• PJSIP is enabled and operational.
• API V3 meets minimum package requirements
• The Event API meets minimum package requirements
• The Event API service is running.
• The Event API service starts automatically when the server boots.
• TCP ports 8088 and 8089 are allowed through the firewall.
• ScopLINK-UPA is enabled on the extensions
• HTTP Server is enabled in the Telephony Module.
  
• HTTPS is enabled.
  

  
  

  • Verify the http service on Asterisk (asterisk -vr)
    http show status
  • From the PBX, check that the HTTPS port is listening: ss -ltnp | grep -E ':8088|:8089'
    
  • From an external system, verify that TCP 8089 is reachable: nc -vz your-public-hostname 8089
    
  • You can also inspect the TLS certificate:

    openssl s_client -connect 127.0.0.1:8089 \
    -servername your.public.hostname </dev/null

    Check that the certificate’s names include the hostname used by the client:

    wss://your.public.hostname:8089/ws

    A browser will reject WSS if the certificate is expired, untrusted, or issued for a different hostname.
    
    
    Test locally
    Run:

    curl -I http://127.0.0.1:8088/ws
    curl -k -I https://127.0.0.1:8089/ws

    Test from outside
    From a machine that is not on the PBX’s LAN:

    nc -vz your.public.hostname 8089

    Or:

    openssl s_client -connect your.public.hostname:8089 \
    -servername your.public.hostname

    TCP 8089 -> PBX TCP 8089

Recommended Tests

After completing the configuration, perform the following tests using a pilot extension:

1. Log in to SCOPLINK UPA.
2. Confirm that the PJSIP extension registers successfully.
3. Verify the presence and extension status.
4. Receive an incoming call.
5. Place an outgoing call.
6. Confirm two-way audio.
7. Test call hold and resume.
8. Test call transfer.
9. Confirm automatic reconnection after closing and reopening the application.
10. Test operation from an external network when remote access is required.

Important Considerations

An invalid, expired, or untrusted HTTPS certificate may prevent the secure WebSocket connection from being established.

Security devices located between the user and the server, including firewalls, routers, and traffic inspection systems, must not block WebSocket connections on TCP port 8089.

Changes to the PJSIP, WebRTC, DTLS, or HTTP server settings may require a configuration reload or a restart of the telephony services.

It is recommended to test SCOPLINK UPA with a single extension before enabling it for all users.

Configuration Summary

To activate SCOPLINK UPA, the platform must run Rocky Linux 8 with PJSIP enabled. API V3 must meet minimum requirements or later, with its service running.

TCP ports 8088 and 8089 must be allowed in the firewall. Automatic transport should be enabled on each applicable extension. Finally, HTTP Server and HTTPS must be enabled under the Telephony Module tab.