[Asterisk-Users] * and Cisco routers

[lists]

It's a very small delay my avg from houston to tampa is about 70 ms over the
tunnel and about 40 with out the tunnel on a good day.  The thing that gets
you is the lack of QOS over the Net so get some good pipes. This is using a
vpn 3005 and a pix 506 with 168 bit encryptions on a nail vpn.  If you want
it over a windows cisco client  I will have to get you that answer tomorrow
as my Laptop is still at work but so far softphone on it work great with
every softphone I have tried.




-----Original Message-----
From: asterisk-users-admin at lists.digium.com
[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of Lars Boegild
Thomsen
Sent: Tuesday, May 18, 2004 10:23 PM
To: asterisk-users at lists.digium.com
Subject: RE: [Asterisk-Users] * and Cisco routers


Well - I would assume that most Asterisk instances run on Linux boxes, so
even if put directly on a public IP address it's quite possible to protect
the machine and do various VPN setup's (including IPSec).  Speaking of which
- anybody got experience with VoIP and IPSec?  I've never really used IPSec,
but I would imagine it creates a significant delay.

> -----Original Message-----
> From: asterisk-users-admin at lists.digium.com
> [mailto:asterisk-users-admin at lists.digium.com]On Behalf Of Ronald R. 
> McDaniel
> Sent: 19 May 2004 11:13
> To: asterisk-users at lists.digium.com
> Subject: Re: [Asterisk-Users] * and Cisco routers
>
>
> Doug,
>
> I don't believe that it would be a good idea to leave the Asterisk box 
> unprotected (without any firewall).  This would leave you wide open 
> for people to access your internal system through the Asterisk box.  
> We have all been participating in a discussion about an article 
> written by the ingenious Mr. Jim Louderback, technology writer for 
> Ziff Davis, regarding the security risk of IP Telephony.  As far as 
> the cost of vpning the phones, maybe you could use LinkSys vpn routers 
> ($129.00 / each) and cut the cost in half.  If you didn't want to go 
> the VPN route, you could setup access-list on your 3810 to only accept 
> traffic from the known IP addresses of your home warriors.  This is 
> not the most secure, but it does provide some security and would 
> probably block most half hearted attempts from wannabe hackers.  You 
> could sell your Cisco phones, install X-Lite (free softphone) and put 
> the money from the Cisco phones toward vpning your network.  There are 
> several ways to go, I just wouldn't leave it wide open.
>
>
> Sincerely,
>
>
>
>
> Ronald R. McDaniel
> Southern Computer Services, Inc.
> rmcdaniel at southerncomp.net
> (251) 444-3136 office
> (251) 446-3137 fax
> (251) 294-1202 cell _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>

_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users