[asterisk-users] Asterisk behind a PIX firewall?

Steve Totaro stotaro at totarotechnologies.com
Tue Nov 27 10:06:49 CST 2007

C F wrote:
> On Nov 27, 2007 9:08 AM, Steve Totaro <stotaro at totarotechnologies.com> wrote:
>> Matt wrote:
>>>     Just checking....  NAT=yes, canreinvite=no ?
>>> Correct, I have those settings set for this phone.  Asterisk has been
>>> reloaded even restarted.
>> Is this a dual NAT situation?  NAT on the phone side and NAT at the PIX?
>>   If so, I fear it will never work, you might get one way audio though.
> I disagree with you, setting in sip.conf:
> externhost=ddnsname;or set the next setting
> externip=x.x.x.x;external ip
> externrefresh=10;for dns
> localnet=
> should take care of this, I have never had a problem with dual nat
> like this, using Aastra, Cisco, Polycom and linksys.

You are probably right.  I think the first and last time I attempted 
double NATs, there was no sip.conf, I have to keep up with the times, 
lol.  Worth a shot.  I still like the OpenVPN solution for security and 
other added benefits.

>> I live OpenVPN bridges for double NAT situations, of course you could
>> try IAX2 but I have seen too many sound quality issues surrounding IAX2
>> so I try to stick with SIP, even if that means setting up VPNs.
>> Thanks,
>> Steve
>> 888.777.1888

More information about the asterisk-users mailing list