This article contains additional advanced configuration information regarding the network connections associated with the Ooma system. A small minority of users will find this information useful for a special network setup.

  1. Service Ports and Firewall Information
  2. Encryption

Service Ports and Firewall Information

Ooma uses the following application ports for administrative data and voice traffic. Note that ports marked as local are for incoming firewall rules, while ports marked as remote are for outgoing firewall rules:

Telo Base Station

  • remote UDP/TCP 53, 1194, 1294
  • remote TCP 80, 110, 443
  • remote UDP 67, 123, 3480
  • local UDP 49000 to 50000
  • remote UDP 10000 to 20000

This port information can be useful if you have a special network configuration with a firewall device upstream of the Ooma Hub or Telo Base Station that restricts application ports on the inside or “private side” of your network for outbound traffic. Firewalls are typically on by default for inbound traffic and no special modifications are required to allow that traffic through.

If you are installing the Ooma Hub or Telo Base Station for the first time and find the line 1 and line 2 buttons are illuminated, you may have a firewall on your router or modem preventing certain Ooma traffic from going through as shown in the example diagram below:

connection and service ports

To verify you are running into this problem, connect a computer to the HOME NETWORK port of the Ooma device. Using this computer, verify you can reach in a web browser. Next, try browsing to a public website (such as or If the web connection to the public website is successful, you may have a firewall blocking Ooma’s service ports and will need to configure firewall policies to allow Ooma’s data and voice ports. For more information on configuring firewall policies, please refer to your modem/router user manual.

Reference: If you are having difficulty connecting to, please see our troubleshooting FAQ.


All service traffic (including voice traffic) to and from Ooma’s central servers is securely encrypted. Note for Ooma systems used with landlines: local calls are typically forwarded through your existing landline connection.