Tuesday, November 27, 2007

Re: [asterisk-users] Asterisk behind a PIX firewall?

C F wrote:
> On Nov 27, 2007 9:08 AM, Steve Totaro <stotaro@totarotechnologies.com> wrote:
>> Matt wrote:
>>>
>>>
>>> Just checking.... NAT=yes, canreinvite=no ?
>>>
>>>
>>> Correct, I have those settings set for this phone. Asterisk has been
>>> reloaded even restarted.
>>>
>>>
>> Is this a dual NAT situation? NAT on the phone side and NAT at the PIX?
>> If so, I fear it will never work, you might get one way audio though.
>>
>
> I disagree with you, setting in sip.conf:
> externhost=ddnsname;or set the next setting
> externip=x.x.x.x;external ip
> externrefresh=10;for dns
> localnet=192.168.0.0/255.255.0.0
> should take care of this, I have never had a problem with dual nat
> like this, using Aastra, Cisco, Polycom and linksys.
>

You are probably right. I think the first and last time I attempted
double NATs, there was no sip.conf, I have to keep up with the times,
lol. Worth a shot. I still like the OpenVPN solution for security and
other added benefits.

>
>> I live OpenVPN bridges for double NAT situations, of course you could
>> try IAX2 but I have seen too many sound quality issues surrounding IAX2
>> so I try to stick with SIP, even if that means setting up VPNs.
>>
>> Thanks,
>> Steve
>>
>> 888.777.1888


_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:

http://lists.digium.com/mailman/listinfo/asterisk-users

No comments: