Simple question - does Hub2 provide Power over Ethernet (PoE)?

[#1]

One final word: to allow incoming calls to the phone I had to:

Allow incoming VOIP on the router:

Home > Advanced Settings > Firewall - choose the port forwarding tab, and put in the values for your phone: you can select by ip address or by device. The default port is 5060, so I used that for all 4 of the ports (inbound and outbound), and I took the lazy way out and enabled TCP/UDP.

I called the rule VOIP.

Allow ALG on the router:

Home > Advanced Settings > Firewall - choose the configuration tab, and at the bottom of the screen 

change Enable SIP ALG to Yes.

Remember to save the settings!

On the phone I made sure that the Global Address Selection was set to STUN.

Blue skies folks!

[#2]

@ThaGuMath  NO, NO, NO !!! don't do that, you've opened up your phone to the whole world!. Best case is You'll likely get 'ghost calls' , worst case you'll get SIPVicious attacks and (depending on how secure your phone is) your SIP account hacked.

There's no need to do all that, you just configure NAT keep alive.

So I would VERY STRONGLY suggest you:-

1) On the KX, Disable Global Address Selection on the KX ( page 90 of the KX admin guide )

2) On the KX Make sure that Global Address Usage is disabled for all lines ( page 92 )

3) On the KX Set the NAT Keep alive interval (for all lines in use) to 20 secs ( page 114 )

4) on the KX ensure the SIP Transport is set to UDP ( page 111 )

5) Remove all the port forwarding for port 5060 on the Hub 2

6) Disable the SIP ALG on the Hub 2 ( most SIP ALGs are 'broken' anyway! )

I'm happy to explain more fully later if you would like, but I wanted to get this out quickly.

[#3]

@ThaGuMath supplementary..

Having re-read the KX manual , you may need to also set the Supports Rport parameter on the KX ( page 114 )

Should using the NAT keepalive not prove successful and you wish to retain your port forwarding solution you MAY be able to improve security by setting the Enable SSAF parameter in the KX ( again page 114 ). Its not a parameter I'm familiar with but if it does what 'it says on the tin' them that might prevent any SIP messages other than from your voip suppliers servers and so prevent any ghost calls or attacks.

edit: you do realise that the KX is quite an old device and may be obsolete ? https://www.provu.co.uk/panasonic-kx-ut123x.html