Use an extension that is NOT a DID on phone.

For example, your DIDs are 2000-2500. Use 3000 or something other than 2000-2500. It's always good practice to set aside a non-DID block for your CallManager for these types of phones in your building or campus. (lobby phones, hallways, etc)

Internal phones will still be able to call it because it will be in the same CSS/PT. The phone can still use outbound calling because it has access to the Gateway and route patterns in the CSS/PTs.

Since you do not 3000 as an inbound DID, 3000 will never work for inbound.

hope this helps!

cheers

As already stated you can use your H.323 gw to block the calls. Use Translation rules that will work, give it a try.

config t

voice translation-rule 1

rule 1 reject /#/

rule 2 reject /#/

*where # is the number that you wish to block.

config t

voice translation-profile BLOCK_NUMBER

translate incoming 1

Assign this translation profile to the incoming dial-peer that you are using.

----------------------

HTH

//Jorge