[asterisk-users] Two Asterisks behind NAT and need to link themusing IAX trunk

[Whisker, Peter]

It is possible to run openVPN in TCP mode over an SSH tunnel. Don't turn
compression on on both though - I'd just switch it on the openVPN if you
have to.

You will probably find the speech is rather choppy due to the delays and
fragmentation, but I have done this.

Peter 

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of bilal
ghayyad
Sent: 18 January 2008 12:21
To: asterisk-users at lists.digium.com
Subject: Re: [asterisk-users] Two Asterisks behind NAT and need to link
themusing IAX trunk

Hi;

Via OpenVPN or port forwarding is known for me, but via SSH is new for
me, how I can do it and what is the difference by SSH and OpenVPN?

Regards
Bilal

-----------------------------
Good question.  I have never tried tunneling IAX over SSH but it seems
like it should work just like anything else.

How about a port opened up for OpenVPN.  You know you can run IAX on
any port you wish, port 80 may work for you if you have some extra
external  IPs not being used for HTTP.  The same is true for OpenVPN.

Thanks,
Steve Totaro

On Jan 17, 2008 8:09 PM, John Constalgie <caduceus_abode at hotmail.com>
 wrote:

>
> Hi there
>
> this is an interesting topic that I see here and a
problem that I am
> trying to solve too.
>
> But I was wondering if the forwarding solution will
work for my case.
>
> So I have two Asterisk boxes A and B.
>
> A is behind a corporate NAT such that A can SSH to
B, but not vice
 versa(
> "One-way SSH" ) . The UDP port 5060 of the corporate
NAT is blocked
 off and
> I will not be able to have it unblocked for security
reasons.
>
> Hence, is my only choice using an SSH tunnel between
A and B for the
 IAX
> connection to work? Will it work though with that
"One-way SSH"
 factor
> mentioned before?
>
> Thanks
> John



 
________________________________________________________________________
____________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs

_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.