When to use Credentials vs ACL (Whitelisted IPs)

use these guidelines to decide whether you should configure credentials , acl (whitelisted ips) , or both on a trunk credentials (sip digest) — recommended for voice ai direct trunking use credentials when your sip endpoint is a cloud voice ai platform (or any environment where source ips are dynamic/unknown), and you want to avoid managing ip allowlists best for voice ai direct trunking, dynamic sbcs, multi tenant provider networks typical choice credentials only (skip acl whitelisting) when ips are not stable recommended in case of elevenlabs, livekit, retell etc sip trunking setups acl (whitelisted ips) — recommended for static enterprise pbx/sbc use acl only when your trunk connects to a customer controlled pbx/sbc with stable, known egress ips best for on‑prem sbcs, fixed datacenter ips, tightly controlled networks typical choice acl only if credentials are not required and ips are stable combination (acl + credentials) — highest security when ips are stable use both when you have credentials and stable ips and want a stricter security posture best for production trunks with fixed ip ranges and stricter access controls why reduces blast radius—credentials alone aren’t sufficient without also matching the allowlist (and vice‑versa)