[asterisk-users] Asterisk behind a PIX firewall?

Steve Totaro stotaro at totarotechnologies.com
Tue Nov 27 10:15:54 CST 2007


Steve Totaro wrote:
> C F wrote:
>> On Nov 27, 2007 9:08 AM, Steve Totaro <stotaro at totarotechnologies.com> wrote:
>>> Matt wrote:
>>>>
>>>>     Just checking....  NAT=yes, canreinvite=no ?
>>>>
>>>>
>>>> Correct, I have those settings set for this phone.  Asterisk has been
>>>> reloaded even restarted.
>>>>
>>>>
>>> Is this a dual NAT situation?  NAT on the phone side and NAT at the PIX?
>>>   If so, I fear it will never work, you might get one way audio though.
>>>
>> I disagree with you, setting in sip.conf:
>> externhost=ddnsname;or set the next setting
>> externip=x.x.x.x;external ip
>> externrefresh=10;for dns
>> localnet=192.168.0.0/255.255.0.0
>> should take care of this, I have never had a problem with dual nat
>> like this, using Aastra, Cisco, Polycom and linksys.
>>
> 
> You are probably right.  I think the first and last time I attempted 
> double NATs, there was no sip.conf, I have to keep up with the times, 
> lol.  Worth a shot.  I still like the OpenVPN solution for security and 
> other added benefits.

Sorry, those options were not available in sip.conf is what I meant to say.

> 
>>> I live OpenVPN bridges for double NAT situations, of course you could
>>> try IAX2 but I have seen too many sound quality issues surrounding IAX2
>>> so I try to stick with SIP, even if that means setting up VPNs.
>>>
>>> Thanks,
>>> Steve
>>>
>>> 888.777.1888
> 
> 
> _______________________________________________
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
> 
> 




More information about the asterisk-users mailing list