Authenticate your PBX and SIP clients.
New trunks block traffic in both directions until you open them. Point your equipment at the trunk's dedicated SIP domain and admit traffic by public IP allowlist, digest authentication with scoped API keys, or short-lived session credentials for browser and CLI softphones.