[asterisk-users] Asterisk behind a PIX firewall?

[Steve Totaro]

C F wrote:
> On Nov 27, 2007 9:08 AM, Steve Totaro <stotaro at totarotechnologies.com> wrote:
>> Matt wrote:
>>>
>>>
>>>     Just checking....  NAT=yes, canreinvite=no ?
>>>
>>>
>>> Correct, I have those settings set for this phone.  Asterisk has been
>>> reloaded even restarted.
>>>
>>>
>> Is this a dual NAT situation?  NAT on the phone side and NAT at the PIX?
>>   If so, I fear it will never work, you might get one way audio though.
>>
> 
> I disagree with you, setting in sip.conf:
> externhost=ddnsname;or set the next setting
> externip=x.x.x.x;external ip
> externrefresh=10;for dns
> localnet=192.168.0.0/255.255.0.0
> should take care of this, I have never had a problem with dual nat
> like this, using Aastra, Cisco, Polycom and linksys.
> 

You are probably right.  I think the first and last time I attempted 
double NATs, there was no sip.conf, I have to keep up with the times, 
lol.  Worth a shot.  I still like the OpenVPN solution for security and 
other added benefits.

> 
>> I live OpenVPN bridges for double NAT situations, of course you could
>> try IAX2 but I have seen too many sound quality issues surrounding IAX2
>> so I try to stick with SIP, even if that means setting up VPNs.
>>
>> Thanks,
>> Steve
>>
>> 888.777.1888