[Asterisk-Users] * and Cisco routers

Tue May 18 21:33:51 MST 2004

The funny thing is that in my experience VoIP actually works quite well over
the Internet.  I am Danish but live in Malaysia, so I do quite a lot of VoIP
calls between those two locations.  That can't possibly get any worse on the
public Internet.  There are an average of 25 hops between Malaysia and
Denmark, it litterally goes all the way round this little planet (from
Malaysia via Hong Kong to US West Coast.  Through US and from US East Coast
to Denmark).  Round-trip delay is usually around 550 ms (meaning somewhere
around 260 ms one way).  Yet in my experience having been running this for
more than a year it is EXTREMELY rare that there are drop-outs or delays
caused by the Internet.  The last mile is important.  If there are drop outs
they are usually always caused by the misserable 382 kbps xDSL link I am
stucked with here in Malaysia.  But that part can be handled with proper QoS
(queing in Linux).

In short - even in the scenario described above - which must be considered
an amost worst case scenario - the quality is generally more than OK and in
general noticable better than GSM calls.  I quite often use a call going
that way to demonstrate the quality when I get concerns about poor quality
of VoIP via the Internet.

I saw a user survey a few years back that concluded that most people didn't
really notice delays of less than 3-400 ms.  Only around 500 ms most users
noticed and was annoyed by it.

And now judging from your comments IPSec shouldn't really be a problem
either.

> -----Original Message-----
> From: asterisk-users-admin at lists.digium.com
> [mailto:asterisk-users-admin at lists.digium.com]On Behalf Of lists
> Sent: 19 May 2004 12:11
> To: asterisk-users at lists.digium.com
> Subject: RE: [Asterisk-Users] * and Cisco routers
>
>
> It's a very small delay my avg from houston to tampa is about 70
> ms over the
> tunnel and about 40 with out the tunnel on a good day.  The thing
> that gets
> you is the lack of QOS over the Net so get some good pipes. This
> is using a
> vpn 3005 and a pix 506 with 168 bit encryptions on a nail vpn.
> If you want
> it over a windows cisco client  I will have to get you that
> answer tomorrow
> as my Laptop is still at work but so far softphone on it work great with
> every softphone I have tried.
>
>
>
>
> -----Original Message-----
> From: asterisk-users-admin at lists.digium.com
> [mailto:asterisk-users-admin at lists.digium.com] On Behalf Of Lars Boegild
> Thomsen
> Sent: Tuesday, May 18, 2004 10:23 PM
> To: asterisk-users at lists.digium.com
> Subject: RE: [Asterisk-Users] * and Cisco routers
>
>
> Well - I would assume that most Asterisk instances run on Linux boxes, so
> even if put directly on a public IP address it's quite possible to protect
> the machine and do various VPN setup's (including IPSec).
> Speaking of which
> - anybody got experience with VoIP and IPSec?  I've never really
> used IPSec,
> but I would imagine it creates a significant delay.
>
> > -----Original Message-----
> > From: asterisk-users-admin at lists.digium.com
> > [mailto:asterisk-users-admin at lists.digium.com]On Behalf Of Ronald R.
> > McDaniel
> > Sent: 19 May 2004 11:13
> > To: asterisk-users at lists.digium.com
> > Subject: Re: [Asterisk-Users] * and Cisco routers
> >
> >
> > Doug,
> >
> > I don't believe that it would be a good idea to leave the Asterisk box
> > unprotected (without any firewall).  This would leave you wide open
> > for people to access your internal system through the Asterisk box.
> > We have all been participating in a discussion about an article
> > written by the ingenious Mr. Jim Louderback, technology writer for
> > Ziff Davis, regarding the security risk of IP Telephony.  As far as
> > the cost of vpning the phones, maybe you could use LinkSys vpn routers
> > ($129.00 / each) and cut the cost in half.  If you didn't want to go
> > the VPN route, you could setup access-list on your 3810 to only accept
> > traffic from the known IP addresses of your home warriors.  This is
> > not the most secure, but it does provide some security and would
> > probably block most half hearted attempts from wannabe hackers.  You
> > could sell your Cisco phones, install X-Lite (free softphone) and put
> > the money from the Cisco phones toward vpning your network.  There are
> > several ways to go, I just wouldn't leave it wide open.
> >
> >
> > Sincerely,
> >
> >
> >
> >
> > Ronald R. McDaniel
> > Southern Computer Services, Inc.
> > rmcdaniel at southerncomp.net
> > (251) 444-3136 office
> > (251) 446-3137 fax
> > (251) 294-1202 cell _______________________________________________
> > Asterisk-Users mailing list
> > Asterisk-Users at lists.digium.com
> > http://lists.digium.com/mailman/listinfo/asterisk-users
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
> >
>
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>