[general]
;bindport=4569 ; if you are NOT using 4569 as your PUBLIC IAX2 facing port for THIS switch, you should change the bindport so Asterisk listens on the forwarded port or call tokens will not work consistently
relaxdtmf=yes ; If your server has issues with DTMF this option may help
bandwidth=high
disallow=all
allow=g722
allow=ulaw
allow=alaw
allow=all
jitterbuffer=no
tos=0x12
calltokenoptional=0.0.0.0/0.0.0.0
requirecalltoken=no
delayreject=yes ; for increased security against brute force attacks
autokill=yes
encryption=yes
trunk=yes
maxcallnumbers_nonvalidated = 64

[npstn] ; Primary NPSTN user (only this username can be changed)
type=user
context=from-npstn
auth=md5
secret=weyfuyhwgoyhrgwrofghfosdf ; can be changed, but let the Business Office know what this is (EVEN IF YOU DON'T CHANGE THIS) or you won't be able to receive calls!
forceencryption=yes

[npstn-rsa]
type = user
context = from-npstn ; your primary incoming dialplan context, typically from-npstn. THIS MUST BE LISTED FIRST.
context = npstnextensible ; eXtensible dialplan. Not important for RSA.
context = sntandem ; StepNet. Good candidate for RSA.
context = from-npstn-operator ; Operator. Good candidate for RSA.
auth = rsa
forceencryption = yes
requirecalltoken = yes
secret=weyfuyhwgoyhrgwrofghfosdf ; this MUST be exactly the same as your NPSTN IAX2 MD5 user secret.
#include iax-rsa-npstn-in.conf ; this file contains the inkeys

#include iax-rsa-npstn-out.conf

[npstn-operator] ; Incoming/outgoing operator routings (recommended)
type=user
context=from-npstn-operator
auth=md5
secret=npstnoperator362362 ; do not change
forceencryption=yes
requirecalltoken=yes

[npstnextensible] ; NPSTN eXtensible dialplan (required for eXtensible dialplan, otherwise unnecessary)
type=user
context=npstnextensible
auth=md5
secret=npstnextensible18771871984 ; do not change: this is not supposed to be a "secret". Call the Business Office if you have questions
forceencryption=yes
requirecalltoken=yes

[sntandem] ; StepNet (required for StepNet tandems, otherwise unnecessary)
type=user
context=sntandem
auth=md5
secret=stepnet3545434756 ; do not change
forceencryption=yes
requirecalltoken=yes