<div dir="ltr"><div><div><div>I have a /29 to use for the network.<br><br></div>My immediate go-to set-up will be to put the asterisk server on a public IP off the /29 and harden the IPtables along with other monitoring scripts and lock down methods. Then add the router on a different /29 IP and have all the phones register through the router to the public asterisk server and limit only registrations from that router's IP address.<br><br></div><div>I then would add the three trunks I need such as inbound/outbound, international, and 911 to the asterisk box<br></div><div><br></div>However, I do think this is best practices. It is my understanding to move the asterisk box behind a router/firewall and have the phones on the same subnet of the asterisk box. Then the router/firewall will do the trunking to the vendors.<br><br></div>I dont know which is best nor do I know the hardware for the router/firewall device. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 4, 2016 at 1:31 PM, Ron Wheeler <span dir="ltr"><<a href="mailto:rwheeler@artifact-software.com" target="_blank">rwheeler@artifact-software.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Both work.<br>
If you have enough IP addresses to dedicate one to your Asterisk
server, that removes one node in the path from the world.<br>
You will need a firewall on the Asterisk server to protect it from
outside meddling.<br>
If you can put the Asterisk server on the same network as the SIP
devices (using a second NIC) that should help performance.<br>
<br>
Is the SIP network on the same network as your internet/data LAN?<br>
<br>
Ron<div><div class="h5"><br>
<br>
On 04/01/2016 1:15 PM, IPN Comm wrote:<br>
</div></div></div><div><div class="h5">
<blockquote type="cite">
<div dir="ltr"><span style="font-size:12.8px">I was wondering if
anyone can give me any pointers or insights of whether or not
to have an asterisk server behind a firewall.</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I have always ran Asterisk on a
public IP but was wondering if I should move it to a local IP
behind a firewall.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I am looking to set up a location
with 300 SIP phones. </div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Normally, I would put the Asterisk
server on one public IP and let the SIP phones get DHCP from a
router on a different IP and they would register to the Public
Asterisk server from that IP address.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Should I move the asterisk server
behind the same router?</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">If so, how should the server be
set up and what is the best router/firewall hardware to
accomplish this environment?</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Thanks,</div>
<div style="font-size:12.8px">-H</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote>
<br>
<br>
</div></div><span class="HOEnZb"><font color="#888888"><pre cols="72">--
Ron Wheeler
President
Artifact Software Inc
email: <a href="mailto:rwheeler@artifact-software.com" target="_blank">rwheeler@artifact-software.com</a>
skype: ronaldmwheeler
phone: <a href="tel:866-970-2435%2C%20ext%20102" value="+18669702435" target="_blank">866-970-2435, ext 102</a></pre>
</font></span></div>
<br>--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
New to Asterisk? Join us for a live introductory webinar every Thurs:<br>
<a href="http://www.asterisk.org/hello" rel="noreferrer" target="_blank">http://www.asterisk.org/hello</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br></blockquote></div><br></div>