[Asterisk-Users] Asterisk behind NAT -- SIP config file

[David J Carter]

I have used the Draytek 2600V router in a few locations where only 1 or 2
phones are required.
The router has 2 FXS ports and can be used locally to an * box or via the
VPN to a remote * box.
The VPN built into the routers just works, and I have 1 user who has had 3
VPN circuits up and running now for 6 months solid.
Not bad in this day and age for an ADSL to stay functional for so long
without interruptions.

Dave

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com]On Behalf Of Anton Krall
Sent: 05 March 2005 04:56
To: 'Asterisk Users Mailing List - Non-Commercial Discussion'
Subject: RE: [Asterisk-Users] Asterisk behind NAT -- SIP config file


The VPN approach might resolv a lot of nat issues I guess... Depending on
the scenario I guess.. You could put another * box inside the second nat and
interconnect using IAX, or if using a single phone, just use your setup, and
finally, if using 2 or more phones and cant put a second * box, well, the
vpn solution, I wonder how to do it if you have ATAs and nost softphone on
the second NATted LAN.. Well... In time I guess :)

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Rudolf
Ladyzhenskii
Sent: Viernes, 04 de Marzo de 2005 10:20 p.m.
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [Asterisk-Users] Asterisk behind NAT -- SIP config file

>>Yes, only port 5060. If you do not forward 5060, you can not call this
> phone
>>from outside. Seem to work OK without other ports being forwarded.
>
> You mean on the remote sip phone firewall? What if there arem ore than
> 1 sip phone on that network behidn that firewall?

Then you are in trouble. Asterisk only sees single public IP address. As far
as it concerns there is only single phone out there.
If you get multiple phones working, let me know.

Another option, I think, may be using VPN, but I have not tried that. Then
you can potentially have remote SIP phones to be on the "virtual" network.

>
> Don't you need to forward ports 10000-20000 for voice? Or does the sip
> phones just open up the ports from inside (by doing the in to out
> calls and keep alives)?
>

I have mot tried to sniff on the traffic in details. I think, other ports
are opened in responce to connection on port 5060. The only port listens at
is port 5060.

Rudolf

_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


_______________________________________________
Asterisk-Users mailing list
Asterisk-Users at lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users