[Asterisk-Users] Asterisk behind NAT -- SIP config file

[Anton Krall]

Why are the sip.conf extensions mentioned twice each?

Also, if you * box is behind another firewall, by forward ports 5060 and
10000-20000 and maybe 5004 from the firewall to the * box will that help on
the NAT issue? 

If phone 2 is behind another firewall, do you need to forward port 5060 only
to that phone? Or some other ports...?

I have read a lot of stuff about NAT and all the mayor flavors, still, Im
having some problems with nat and some networks..  I need to do more testing
using ethereal and other tools but I wanted to hear some basic thought on
the subject.

Thx! 

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Rudolf
Ladyzhenskii
Sent: Viernes, 04 de Marzo de 2005 08:41 p.m.
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [Asterisk-Users] Asterisk behind NAT -- SIP config file

Hi, all

This is the souktion that worked for me.
Here is my config again

>> PHONE  1 ------ * BOX
>>                     |
>>              NAT/Firewall
>>                     |
>>                     |
>>               NAT/Firewall
>>                    |
>>                    |
>>                  PHONE 2

Firewall on Asterisk end is Linux RH9 with iptables.

I have set it up to forward ports 5060, 10000-20000 to Asterisk.

Firewall at PHONE 2 end is an off-the-shelf router. Firewall was disabled
and I port forwarded port 5060 to the phone.

Here is my sip.conf file: (PHONE1 is ext101, PHONE2 is ext102).
; SIP configuration file

[general]

port=5060

bindaddr=0.0.0.0

context=default

externip=<my poublic ip>

localnet=192.168.1.0/24



[ext101]

type=user

host=dynamic

secret=ext101

context=default

[ext101]

type=peer

secret=ext101

host=dynamic

context=default

callerid="Ext 101"



[ext102]

type=user

nat=yes

host=dynamic

secret=ext102

context=default

canreinvite=no

[ext102]

type=peer

nat=yes

secret=ext102

host=dynamic

context=default

callerid="Ext 102"

canreinvite=no



Hope it helps.



Rudolf

_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users