So, do the same setup with the DNS, setup a colocated machine and your
asterisk inside the LAN registers with it, in your dialplan instead of:
exten => 123,1,Dial(SIP/123,25,r)
exten => 123,2,VoiceMail(u123)
Do:
exten => 123,1,Dial(SIP/123,25,r)
exten => 123,2,Dial(IAX2/colocation-asterisk/${exten},r)
exten => 123,3,VoiceMail(u123)
And on the colocation don't do any sort of voicemail.
Since if you are inside the LAN the DNS would point to the asterisk in the
lan and outside it would point to the colocated machine, it should ease the
security concerns you have and also provide the same functionality, you can
plug in the phone anywhere and it will work just the same.
You will require some testing/tweaking however to insure every possible
senario works (IE: Calls between 2 phones conected to the colocation
asterisk)
On 1/12/07, Andy Hester <[EMAIL PROTECTED]> wrote:
Andrew,
Thanks, for the response. That is a very clean solution and much less
work/complication, however, I am not sure that the security guy for this
network will allow me to put up the asterisk box dual homed to the public IP
and the LAN. If there is not another feasible way then I may end up going
with this anyway. Any other feasible ways to accomplish this?
Sorry for the top post... Having to use Outlook for the moment.
Thanks,
Andy Hester
________________________________________
From: [EMAIL PROTECTED] [mailto:
[EMAIL PROTECTED] On Behalf Of Andrew Joakimsen
Sent: Friday, January 12, 2007 9:57 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Suggestion for a new asterisk setup.
I assume there is one NAT router for the LAN and nothing fancy, so setup
the Asterisk machine on the router/firewall (or make it such) and have it
listen on both LAN and WAN interface.
Now use a hostname for the SIP server, and run a DHCP/DNS server that will
resolve that hostname to the LAN IP address of your router, when it is
queried from the LAN side, when from the WAN side it would just be the
regular lookup (use FQDN).
Now phones will work from anywhere, no NAT issues to deal with at all.
Each interface that asterisk runs on is isolated from the other.
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
