[Asterisk-biz] voip VPN solution requirement

[Brian McSpadden]

On 5/2/05, ht at phonitel.com <ht at phonitel.com> wrote:
> Hello,
> 
> Thanks for all this feedback. Let me elaborate more the requirements:
> 
> 1-) The purpose of VPN is not only to hide the calls, but also to hide the
> nature of IP packets (our customer dones not even want his ISP provider to know
> he is doing voip). So I don't know if RTP encryption would do here as I believe
> that ports being used are always the same;
> 
> 2-) The solution should be able to pass 90 simultaneous calls over a 2 MEg link;
> 
> 3-) There is only one link between UK --> Central Africa country (POP );
> 
> We are open to other than VPN solution, encryption or any other solution
> provided the above are met.
>

I've never seen a problem running SIP or IAX over an IPSEC VPN, just
make sure that whatever you use, it is UDP and not TCP. Tunnelling RTP
UDP packets over TCP causes some REALLY strange timing issues, since
everything is ACK'd and kept track of.

Brian