[Asterisk-Users] X-Lite to Asterisk through NAT?

[Geoff Nordli]

From: asterisk-users-admin at lists.digium.com
[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of programmer_ted
Sent: Friday, July 30, 2004 10:34 AM
To: asterisk-users at lists.digium.com
Subject: Re: [Asterisk-Users] X-Lite to Asterisk through NAT?

Did you have to forward any ports to the box running X-Lite (or is that one
behind a NAT?)

Thanks :)
Ted

Geoff Nordli wrote: 
 
-----Original Message-----
From: asterisk-users-admin at lists.digium.com 
[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of 
programmer_ted
Sent: Wednesday, July 28, 2004 8:29 PM
To: asterisk-users at lists.digium.com
Subject: [Asterisk-Users] X-Lite to Asterisk through NAT?

Hi there,

I have an X-Lite phone on my box and I'm trying to register it with a 
remote Asterisk box.  Both the X-Lite and Asterisk are behind 
a NAT.  I 
know it's a pain to do because of SIP not working well with 
NATs, but I 
know there are ways to do such a thing...moving the Asterisk 
box outside 
the NAT is not a possibility at the moment.  One thing we tried was 
setting up a VPN, but I can't have the VPN server and a VPN client 
running on the same machine, because they use the same port 
(non-configurable).  I can't set the VPN up on the Windows XP 
machine, 
because that only allows one user to be connected, and we 
need at least two.

Any ideas?

Thanks in advance,
Ted
    

Hi Ted.

I managed to get it to work today.  These are steps I took.  

On my firewall I port forwarded 5060, 10000-11000 UDP to the internal
Asterisk box.

In the sip.conf file I made these changes:
nat=yes 
externip = public.ip.address

On the X-lite phone I pointed the SIP Proxy to the public.ip.address that
was set above in the sip.conf file.


Good Luck.

Geoff




_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users



I am sorry Ted, but I forgot about receiving calls on the X-lite client.

This solution worked for outbound calls, but I don't think this solution
will work for calls that are made to the x-lite client that is hiding behind
the NAT device.  The reason why outbound calls will work is because the NAT
device was stateful so it will automatically keep the channel open.  

When calls are made from Asterisk to the X-lite device it will try to
connect a given port but it won't be able to unless the port is open.  It
looks like there are some options within X-lite that allow you to nail down
the RTP port and you could probably do some port forwarding on the NAT
device based on the RTP port that you select.

Does anyone have any recommendations on the configuration?

Geoff

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.732 / Virus Database: 486 - Release Date: 7/29/2004