[asterisk-users] Best way ro run 2 or more asterisk servers?

[Tilghman Lesher]

On Thursday 17 December 2009 04:37:52 Landy Landy wrote:
> --- On Wed, 12/16/09, Landy Landy <landysaccount at yahoo.com> wrote:
> > From: Landy Landy <landysaccount at yahoo.com>
> > Subject: Re: [asterisk-users] Best way ro run 2 or more asterisk servers?
> > To: "Asterisk Users Mailing List - Non-Commercial Discussion"
> > <asterisk-users at lists.digium.com> Date: Wednesday, December 16, 2009,
> > 7:28 AM
> >
> > > peering useful: http://astrecipes.net/index.php?n=204Thanksl.
> >
> > I followed exactly what' on that tutorial and can't get it
> > to work. Now,
> >
> > I tried:
> >
> > example
> >
> > Server1
> >
> > [server2]
> > type=peer
> > context=from_client
> > host=server2-ip
> >
> >
> > Server2
> >
> > [server1]
> > type=peer
> > context=from_client
> > host=server1-ip
> >
> > without the username and secret and now works but, why
> > isn't working with the usernames? and is this way as secured
> > as using username and secret?
>
> Can someone please clarify this. I'm confused, I thought a server needed to
> be secured with it's username and password.

In some ways, it's more secure, as only hosts with the specified IP can make
calls on that peer.  With username/password, it remains a possibility,
especially if the username and password are easy to guess, that another host
could authenticate and make calls.  While it's not impossible for another host
to take over a server's IP address, the technique is significantly more
limited in terms of where in the network such spoofing may occur.

-- 
Tilghman Lesher
Digium, Inc. | Senior Software Developer
twitter: Corydon76 | IRC: Corydon76-dig (Freenode)
Check us out at: www.digium.com & www.asterisk.org