[Asterisk-Users] More NAT questions

[rudolfl at optusnet.com.au]

I have used externip.

Could it cause a problem if internal and extarnal networks use same IP range? Both
of the are class C networks and are 192.168.1.x (this is a pretty common choice for
addresses)?

But then again, Astersik should interpret incoming traffic as something that came in
from external public IP, not extract just the local IP address from the SIP packet.
Am I right?

Rudolf


> Julian J. M. <julianjm at gmail.com> wrote:
> 
> In you asterisk sip.conf:
> [general]
> externip=xxx.xxx.xxx.xxx ;ip address of your nat firewall (public ip)
> localnet=192.168.0.0/24    ; the local subnet where the asterisk box is
> 
> If you don't externip, externip will never be used, because asterisk
> won't know WHEN to use it.
> 
> Also, define   canreinvite=no in your sip phones sections, as was
> suggested above.
> 
> Julian J. M.
> 
> 
> On Wed, 2 Mar 2005 23:26:56 +1100, Rudolf Ladyzhenskii
> <rudolfl at optusnet.com.au> wrote:
> > Hi, all
> > 
> > Still trying to get NAT working.
> > 
> > I have following setup:
> > 
> > PHONE  1 ------ * BOX
> >                     |
> >              NAT/Firewall
> >                     |
> >                     |
> >               NAT/Firewall
> >                    |
> >                    |
> >                  PHONE 2
> > 
> > Firewall next to phone 2 has all ports open.
> > Firewall next to Asterisk has open ports 5060 and 10000:20000. All of 
> those
> > are forwarded to Asterisk box.
> > 
> > Both phones succesfully register with Asterisk. (I had to add NAT=yes 
> to
> > configuration of PHONE 2 in sip.conf to get this far).
> > Now, problems:
> > I can place a call from PHONE2 to PHONE1, but sound path is not 
> established.
> > Calls from PHONE1 to PHONE2 can not be placed at all. (I assume that 
> this is
> > because port 5060 is not forwarded to the phone at NAT/Firewall, but 
> more on
> > it later).
> > 
> > Looking at SIP debug info, Asterisk tries to use local address of 
> PHONE2
> > instead of its public IP. As a result, no info can be sent to it.
> > 
> > I have tried to install SIPROXD on the NAT/Firewall close to Asterisk 
> box,
> > but this did not help.
> > 
> > Now, we have tried to use one of the commercial VoIP service at 
> PHONE2
> > location. We had to use their phone and it worked just fine without 
> any
> > alterations to NAT/Firewall device. I am pretty sure that they use 
> SIP, so
> > they did resolve the problem somehow. Sorry, there is no technical 
> info
> > available on this service.
> > 
> > Did anyone succeeded in doing this setup? I know, IAX is a better 
> way, but I
> > can not setup many Asterisk boxes.
> > 
> > Basically, I am doing it for a friend. He is working for a small 
> medical
> > company. They have number of offices that are not open every day and 
> offices
> > are too small to put Asterisk box in each one. There will be 1-3 IP 
> phones
> > in each office, except central one. Central one will need Asterisk, 
> the rest
> > should be on their own.
> > 
> > Any help is greatly appreciated.
> > 
> > Thanks,
> > Rudolf
> > 
> > _______________________________________________
> > Asterisk-Users mailing list
> > Asterisk-Users at lists.digium.com
> > http://lists.digium.com/mailman/listinfo/asterisk-users
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
> >
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users