Thanks Lloyd, I think I might go this route to try it out.
Do all Snom phones have VPN / PPTP / OpenVPN functionality built in? Or only 
specific models... their site implies all, but the product brochure indicates 
only the 370 model.

Chuck

From: [email protected] [mailto:[email protected]] On Behalf Of 
Lloyd Aloysius
Sent: September-08-11 10:36 PM
To: Chuck Mariotti
Cc: [email protected]
Subject: Re: [on-asterisk] Any Recommendations for Remote Phones via VPN

Hi Chuck,

1. Yealink and Snom Phones are support OpenVPN. So you can enable the Open VPN 
in pfsense and connect the phone directly using open vpn.

2. Simple way

Asterisk Box - Ethernet 1 - LAN
Asterisk Box - Ethernet 2 - WAN - Assign a public IP address to the Asterisk 
server.

This solves all the problems. But you have to secure the Asterisk with IP 
Tables & Fail2Ban.

I use this way all the time . Some of my first servers running this way last 4 
years with asterisk 1.2 :)


Thanks and regards,
Lloyd Aloysius
SunTel Technologies Inc.  www.SunTelTech.ca<http://www.sunteltech.ca/>     
[http://www.sunteltech.ca/images/socialmedia/twitter.png] 
<http://twitter.com/#!/sunteltech>   
[http://www.sunteltech.ca/images/socialmedia/facebook.png] 
<http://www.facebook.com/SunTelTechnologies>   
[http://www.sunteltech.ca/images/socialmedia/blog.png] 
<http://www.sunteltech.ca/blog/>
t. +1-416-479-0505 x 203  e. 
[email protected]<mailto:[email protected]>
Business Phone System | Hosted PBX | IT Support | VoIP Solutions | Cloud 
Services




On Thu, Sep 8, 2011 at 10:13 PM, Chuck Mariotti 
<[email protected]<mailto:[email protected]>> wrote:
I have inherited a couple of clients that are running remote SIP phones by 
opening up a port (not 5060) and running SIP across it. Their Asterisk boxes 
are behind a pfSense 2.0 machine that has PPTP currently enabled for remote 
computers.

They have a need for more remote users, so I'm thinking maybe it's a good idea 
to change this now, rather than later.

How are people setting up remote phones? It would seem to me that having a 
remote router (DD-WRT or other?) that connects to pfSense via VPN (any 
suggestions or documents on how to do this).

I was going to look to see what phones have VPN capabilities built-in 
(recommendations?).

I was leaning to the DD-WRT side but have concerns about detailed instructions 
on how to set this up with pfSense AND QOS issues (if there are other computers 
using the internet connection, not via the DD-WRT router).

Regards,

Chuck Mariotti

13 Seymour Ave.
Toronto, Ontario
M4J 3T3
Office: 416-469-5008 x 222<tel:416-469-5008%20x%20222>
Fax: 416-469-5009<tel:416-469-5009>
[email protected]<mailto:[email protected]>
www.xunity.com<http://www.xunity.com/>


Reply via email to