[asterisk-users] NAT issue with Fortinet Firewall

Carlos Chavez cursor at telecomabmex.com
Fri Apr 11 18:25:44 CDT 2008


	I have a customer with a Fortinet Firewall that is having stability
issues with Asterisk and SIP endpoints (PAP2T) outside his network.  

	The first issue I see is that Asterisk sees all phones as the IP
address of the Fortinet.  Since the parameter "localnet" defines the
local network and that address falls in that range, how will Asterisk
treat the endpoints?  I have "nat=yes" for all phones and
"canreinvite=no" as well.  The "externip" parameter is set to the
outside public IP address.  Still we have calls with one way audio.

	This is the first setup with a firewall that rewrites the IP address of
the endpoint so I do not know how that is affecting the packet flow.  On
my other servers I can always see the public IP of the endpoint.

-- 
Telecomunicaciones Abiertas de México S.A. de C.V.
Carlos Chávez Prats
Director de Tecnología
+52-55-91169161 ext 2001
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20080411/e4611c61/attachment.pgp 


More information about the asterisk-users mailing list