[Asterisk-Users] Phones that work well through NAT

[Sean Garland]

So I have * box ----  shorewall/linux NAT firewall ---- internet ----- WRT54G with openwrt -----  IP500

I have 5060, 4569, and 10000 through 20000 forwarded to * box from internet.  I have tried everything I can think of on the wrt to get it to work but it appears, looking at tcpdump that my phone is trying to get to the * box (I can get one way audio with port mapping in the WRT) using the 192.168.x.x address it has as its internal interface...  Is there a way to force the IP500 to use the public IP of the * box for RTP?  Then it should work...  

Thanks
Sean

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Andrew Kohlsmith
Sent: Tuesday, April 18, 2006 7:31 AM
To: asterisk-users at lists.digium.com
Subject: Re: [Asterisk-Users] Phones that work well through NAT

On Tuesday 18 April 2006 09:57, Sean Garland wrote:
> So how do you get a Polycom phone to work with * over NAT?  I can't seem to
> get it to work.  If I forward ports, I can get one-way audio, but that’s
> it.  Looking at a packet capture, it appears that my phone is trying to
> send data to the internal address of the * server, which is of course, not
> available from the private side of the NAT lan...  I have a polycom
> soundpoint IP 500.

You don't do anything to get it to work through NAT.

If your * box is behind NAT you need to screw around a little, but for 
situations like this:

* box --- [internet] --- [nat dsl router] --- IP501

all you do is set 'nat=yes' on the * box, in the IP501's peer setting.  That's 
it.  It even works with multiple IP501s behind the same NAT DSL router.

If you have a stupid NAT box that closes ports off too quickly or plays too 
many games with the packets you may need some additional configuration 
(shorter registration expirations, etc.) but just buy a decent NAT box... 
WRT54Gs work just fine in their default configuration, for example.

-A.
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

Asterisk-Users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.4.3/317 - Release Date: 4/18/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.4.3/317 - Release Date: 4/18/2006