[asterisk-users] Asterisk and NAT ?

[Bob Chiodini]

Does the Linksys know it should be using port 5070?  It would seem to me
that port forwarding would be required as the phones are behind a NAT'd
firewall.  How would asterisk know how to get there since it's not on
the same subnet (outside the firewall).

If the asterisk box has physical access to the NAT'd subnet, you could
put in a second NIC connected behind the firewall.

Bob...

On Thu, 2006-09-07 at 23:57 -0400, William Piper wrote:
> Does the phone have stun settings? If so, try using stun.fwdnet.net
> and take out the port forwards and see if it works.
>  
> bp
> 
>  
> On 9/7/06, Noc Phibee <noc at phibee.net> wrote: 
>         yusuf a écrit :
>         >
>         > Hi,
>         >
>         > you dont have to/should'nt be using different SIP ports for
>         each 
>         > phone.  Its completely not needed.  Also, you dont have/need
>         to port
>         > forward.  Just open ports 5060 and 1000-20000, on the box
>         that
>         > asterisk is running, and on your NAT router. Dont port
>         forward.
>         >
>         > Then in sip.conf
>         >
>         >
>         >  [202]
>         >  username=202
>         >  secret=X
>         >  type=friend
>         >  host=dynamic
>         >  disallow=all
>         >  allow=g729
>         >  allow=alaw
>         >  allow=ulaw 
>         >  context=interne
>         >  nat=yes
>         >  canreinvite=no
>         >
>         >
>         >  [200]
>         >  username=200
>         >  secret=X
>         >  type=friend
>         >  host=dynamic
>         >  disallow=all
>         >  allow=g729 
>         >  allow=alaw
>         >  allow=ulaw
>         >  context=interne
>         >  nat=yes
>         >  canreinvite=no
>         >
>         >
>         > then restart linksys and thomson, and you will see that they
>         both
>         > register on asterisk cli.  Now you will be able to
>         call/receive on both. 
>         >
>         
>         
>         
>         Thanks for your answer, but if i don't put a port forward, i
>         have :
>         
>         200/200                    83.167.122.119   D   N      5060
>         UNREACHABLE
>         
>         On the thomson, i have "SIP Unregister", it's a important
>         option  ? 
>         
>         Thanks bye
>         
>         
>         _______________________________________________
>         --Bandwidth and Colocation provided by Easynews.com --
>         
>         asterisk-users mailing list
>         To UNSUBSCRIBE or update options visit: 
>           http://lists.digium.com/mailman/listinfo/asterisk-users
> 
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users