-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Friday, August 2, 2013, 3:42:40 PM, you wrote:

> Hi Armin,
Hi Lonnie,

> I see, you want to route a private subnet created and NAT'ed in
> pSense into the internal interface of AstLinux.  While in theory
> that should work, I can't say I've ever tried that.
Some kind of...

> As an alternative approach...

> 1) Allow AstLinux to NAT the internal interfaces as per the default.
> 1a) Because of upstream NAT, set "externaddr" and "localnet" in
> your sip.conf if direct incoming SIP calls are desired.
Ok  -  which  externaddr  and  localnet.   I'm presuming the EXTIF for
externaddr and localnet from INTIF.  Correct?
This are the only seetings to put into sip.conf?

> 2) Have all the internal phones register with Asterisk in AstLinux (probably 
> are doing already)
Yes.

> 3) Set "directmedia=no" in your sip.conf for the local phones.
Good advice - thanks.

> In this way only the upstream pfSense NAT comes into play, the
> local phones have no-NAT talking to Asterisk, and outbound Asterisk
> in AstLinux is not NAT'ed since it is directly on EXTIF.  Only
> pSense does NAT'ing for SIP, since all outbound SIP comes directly from 
> Asterisk in AstLinux.
Cool - this is a very good approach, Lonnie!

> Additionally, keeping Asterisk in the path of the local phones
> allows you to do Dial() options like "Kk" to do call parking per
> features.conf, among other things.
Point taken ;)

> Of course any non-Asterisk traffic from the AstLinux internal
> interface will be double NAT'ed, but that should not be a problem.
This won't happen as this box is purely assigned for Asterisk.

> Lonnie
Armin


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.6 (Build 6060)

iQEVAwUBUfwOYS2oeWmGisYXAQgM0Af/VUXA00XkHeIuY1Du5OB0jTmGZolyreIR
lOwEi3hz0ccl+UHDyRJ20jqMTz0WbWlL6Uck0I0Jo82Nuv94byQhu9+J9tZsCZrn
bsZhS5gUk7oMcWAErkB4FTY/BJgt9ZhlI2qBtVaEtg6lPgVt8IaSr5sAcSfCsJzA
FhTD5ZGu/4zXcbfncDG0idSzFS6soK1OveJ0gFRmBuogKU2PBRrK4jePm2IO4sbn
tud+WWzHSKTwSg/UPl5/U4eHkx36wtdh8US0E9NjdGc/HDCJfmmYmE85YWXmoX7X
ocjpkrSf5zF8YVLd63ojXqya1jrGaRyzlA06p2InP47AdWvw7CYG6Q==
=U6oU
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Get your SQL database under version control now!
Version control is standard for application code, but databases havent 
caught up. So what steps can you take to put your SQL databases under 
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
_______________________________________________
Astlinux-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
[email protected].

Reply via email to