You're right — below are ready-to-import example ACL entries for a common Genesys Engage SIP server format. I provide two variants: (A) IP/CIDR-only rules, and (B) IP+protocol+port rules (SIP/TLS and RTP). If your Genesys product requires a different syntax, tell me which one and I’ll adapt these.
A) IP/CIDR-only allow rules
• Allow 143.223.88.0/21
• Allow 161.115.160.0/19
Example (generic ACL lines)
• allow ip 143.223.88.0/21
• allow ip 161.115.160.0/19
B) IP + protocol + port rules (SIP/TLS + RTP) Typical ports: UDP/TCP 5060 (SIP), TCP/TLS 5061 (SIP-TLS), RTP 10000–20000 UDP.
Example (generic ACL lines)
• allow udp 143.223.88.0/21 5060
• allow tcp 143.223.88.0/21 5060
• allow tcp 143.223.88.0/21 5061
• allow udp 143.223.88.0/21 10000-20000
• allow udp 161.115.160.0/19 5060
• allow tcp 161.115.160.0/19 5060
• allow tcp 161.115.160.0/19 5061
• allow udp 161.115.160.0/19 10000-20000
Example JSON-style entry (if your system accepts structured ACLs) { "rules": [ {"action":"allow","proto":"udp","cidr":"143.223.88.0/21","ports":"5060"}, {"action":"allow","proto":"tcp","cidr":"143.223.88.0/21","ports":"5060"}, {"action":"allow","proto":"tcp","cidr":"143.223.88.0/21","ports":"5061"}, {"action":"allow","proto":"udp","cidr":"143.223.88.0/21","ports":"10000-20000"}, {"action":"allow","proto":"udp","cidr":"161.115.160.0/19","ports":"5060"}, {"action":"allow","proto":"tcp","cidr":"161.115.160.0/19","ports":"5060"}, {"action":"allow","proto":"tcp","cidr":"161.115.160.0/19","ports":"5061"}, {"action":"allow","proto":"udp","cidr":"161.115.160.0/19","ports":"10000-20000"} ] }
Notes:
• These ranges apply to both Realtime and SIP signaling/media from LiveKit Cloud.
• If your Genesys deployment requires explicit DNS/wildcard entries instead of IPs, use *.livekit.cloud and *.turn.livekit.cloud instead.
• Tell me which Genesys product/version you use if you want these in product-specific syntax (e.g., Genesys Engage SIP server config).