[Asterisk-Users] SIP and permit specified ip addresses
Stephen R. Besch
sbesch at acsu.buffalo.edu
Wed Oct 22 06:27:53 MST 2003
Comments inline
Thomas Haeger wrote:
>Hi all,
>
>can somebody explain me how exactly the "type", "host", "permit" and "deny"
>option in sip.conf play together?
>
>Where is the difference between "user" and "peer" ?
>
>I want configure SIP so that it is only from specified net section possible
>to make a call.
>
>I have tried following:
>
>[test]
>type=peer
>callerid=testaccount
>context=voipin
>dtmfmode=inband ; Choices are inband, rfc2833, or info
>deny=0.0.0.0/0.0.0.0
>permit=172.20.0.0/255.255.0.0
>
>Here i thought that it is possible to make a call only for computers from
>the 172.20.0.0 net section.
>But this don't work. No computer can make a call.
>
>
First, you must have a separate named entry for each phone that is going
to be served by *. The permit and deny should go in the general section
and if they work like they do everywhere else, will limit the ip address
range of phones connecting to *. Really only useful if you are letting
the phone pass it's IP address to * (using dynamic as the host). If the
phones have fixed IP addresses, I wouldn't use dynamic, just specify the
IP as you did in your working example.
The peer type means that the phone referenced by the relevant entry can
both make and receive calls. But the details are somewhat more
complicated. See the many useful comments in the list over the last
several weeks.
>The only thing that worked for me was following:
>[test]
>type=peer
>callerid=testaccount
>context=voipin
>host=172.20.23.206
>
>The address 172.20.23.206 is the ip from the client pc. This works, but i
>want specify a net section so that more computers are allowed to make calls.
>
>Can sombody help me with this ?
>
As far as I know, there is no mechanism for this. You could specify
host dynamic with a very short registration time, but this would require
that the connecting PC was nice enough to dissappear after each call and
then, nobody could receive calls. Asterisk would need to be patched to
automatically clone a phone definition each time a new IP came in. I
suspect that this would not be an easy task.
>
>Thank you very much.
>
>
>Thomas.
>
>_______________________________________________
>Asterisk-Users mailing list
>Asterisk-Users at lists.digium.com
>http://lists.digium.com/mailman/listinfo/asterisk-users
>
>
>
>
>
More information about the asterisk-users
mailing list