[Asterisk-Users] More NAT questions -- SOLVED

[Rudolf Ladyzhenskii]

Hi, all
Got it to work finally. Thanks to all.

Had to add
> [general]
> externip=xxx.xxx.xxx.xxx ;ip address of your nat firewall (public ip)
> localnet=192.168.0.0/24    ; the local subnet where the asterisk box is

Actually, I had 'externip' before, but I have added 'localnet' one.

I also had to do port forwarding on the NAT near to PHONE 2 to pass port 
5060 to the phone. This is needed if you ever want to call this phone.

I can e-mail my sip.conf to anyone who is interested.

Rudolf


----- Original Message ----- 
From: "Julian J. M." <julianjm at gmail.com>
To: "Asterisk Users Mailing List - Non-Commercial Discussion" 
<asterisk-users at lists.digium.com>
Sent: Thursday, March 03, 2005 4:11 AM
Subject: Re: [Asterisk-Users] More NAT questions


> In you asterisk sip.conf:
> [general]
> externip=xxx.xxx.xxx.xxx ;ip address of your nat firewall (public ip)
> localnet=192.168.0.0/24    ; the local subnet where the asterisk box is
>
> If you don't externip, externip will never be used, because asterisk
> won't know WHEN to use it.
>
> Also, define   canreinvite=no in your sip phones sections, as was
> suggested above.
>
> Julian J. M.
>
>
> On Wed, 2 Mar 2005 23:26:56 +1100, Rudolf Ladyzhenskii
> <rudolfl at optusnet.com.au> wrote:
>> Hi, all
>>
>> Still trying to get NAT working.
>>
>> I have following setup:
>>
>> PHONE  1 ------ * BOX
>>                     |
>>              NAT/Firewall
>>                     |
>>                     |
>>               NAT/Firewall
>>                    |
>>                    |
>>                  PHONE 2
>>
>> Firewall next to phone 2 has all ports open.
>> Firewall next to Asterisk has open ports 5060 and 10000:20000. All of 
>> those
>> are forwarded to Asterisk box.
>>
>> Both phones succesfully register with Asterisk. (I had to add NAT=yes to
>> configuration of PHONE 2 in sip.conf to get this far).
>> Now, problems:
>> I can place a call from PHONE2 to PHONE1, but sound path is not 
>> established.
>> Calls from PHONE1 to PHONE2 can not be placed at all. (I assume that this 
>> is
>> because port 5060 is not forwarded to the phone at NAT/Firewall, but more 
>> on
>> it later).
>>
>> Looking at SIP debug info, Asterisk tries to use local address of PHONE2
>> instead of its public IP. As a result, no info can be sent to it.
>>
>> I have tried to install SIPROXD on the NAT/Firewall close to Asterisk 
>> box,
>> but this did not help.
>>
>> Now, we have tried to use one of the commercial VoIP service at PHONE2
>> location. We had to use their phone and it worked just fine without any
>> alterations to NAT/Firewall device. I am pretty sure that they use SIP, 
>> so
>> they did resolve the problem somehow. Sorry, there is no technical info
>> available on this service.
>>
>> Did anyone succeeded in doing this setup? I know, IAX is a better way, 
>> but I
>> can not setup many Asterisk boxes.
>>
>> Basically, I am doing it for a friend. He is working for a small medical
>> company. They have number of offices that are not open every day and 
>> offices
>> are too small to put Asterisk box in each one. There will be 1-3 IP 
>> phones
>> in each office, except central one. Central one will need Asterisk, the 
>> rest
>> should be on their own.
>>
>> Any help is greatly appreciated.
>>
>> Thanks,
>> Rudolf
>>
>> _______________________________________________
>> Asterisk-Users mailing list
>> Asterisk-Users at lists.digium.com
>> http://lists.digium.com/mailman/listinfo/asterisk-users
>> To UNSUBSCRIBE or update options visit:
>>    http://lists.digium.com/mailman/listinfo/asterisk-users
>>
> _______________________________________________
> Asterisk-Users mailing list
> Asterisk-Users at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-users
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users