[Asterisk-Users] Using my GrandStream remotely

[Craig Guy]

Depends on what you mean by firewall.  If both ends are behind a NAT type
router then you shouldn't have any problems provided you configure 'nat=yes'
and 'qualify=yes' in Asterisk, and the appropriate STUN settings in the
phone.  The qualify is important as it keeps a 'session' open in the NAT
router between the asterisk IP and the phone.

If * is behind a firewall then you most likely will be out of luck, you will
find that the audio stream from the phone is discarded by the firewall as *
chooses the port randomly and firewall can't see inside the SIP packet to
determine the port * has specified.  One solution would be to use SER and an
RTP Proxy, you'd still have to open up a range of UDP ports based on the
number of concurrent calls but it should work.

We're sorta in a similar situation with work, and are stuck with MS ISA as a
'firewall' for a few weeks until our hardware firewalls arrive.  ISA will
not pass the traffic, it needs someone to write a SIP 'application filter'
so it can read the SDP inside the SIP traffic and dynamically open and close
the RTP ports.  If I was a programmer I'd have a go at writing one but I'm
just a lowly sysadmin.

Craig

----- Original Message ----- 
From: "Ferguson, Michael" <ferguson at BRVMLAW.COM>
To: "Asterisk Users Mailing List - Non-Commercial Discussion"
<asterisk-users at lists.digium.com>
Sent: Saturday, October 16, 2004 3:39 AM
Subject: [Asterisk-Users] Using my GrandStream remotely


G'Day All,

I have a GS Budge Tone-100 on my LAN behind a firewall.
What settings, on the IP Phone and on the * server, do I have to
configure so I can use the IP Phone at some other location with a
broadband connection?

Thanks for your assistance.

Ferg.
_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users