Re: [asterisk-users] [NAT] * + private IP + locked-down firewalls?
On Mon, 05 Jul 2010 12:45:34 +0200, Gilles codecompl...@free.fr wrote: Provided the user doesn't have access to the firewall (eg. corporate or hotel), and the firewall doesn't allow dynamic port opening through UPnP or NAT-PMP... For those interested, I was tipped through private e-mail about using OpenVPN to open a steady tunnel between the client and Asterisk, and have the SIP client send packets through that tunnel instead of trying to connect directly. -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] [NAT] * + private IP + locked-down firewalls?
Hi! Provided the user doesn't have access to the firewall (eg. corporate or hotel), and the firewall doesn't allow dynamic port opening through UPnP or NAT-PMP... For those interested, I was tipped through private e-mail about using OpenVPN to open a steady tunnel between the client and Asterisk, and have the SIP client send packets through that tunnel instead of trying to connect directly. Indeed - and both Snom and Yealink offer phones with OpenVPN support built-in. That way you do not need to worry about the router/firewall. BTW: I see that the Yealink firmware now also comes with 802.1x support. Am I correct that no other popular SIP phone brand has that? Philipp -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] [NAT] * + private IP + locked-down firewalls?
On Fri, Jul 9, 2010 at 4:28 AM, Gilles codecompl...@free.fr wrote: On Mon, 05 Jul 2010 12:45:34 +0200, Gilles codecompl...@free.fr wrote: Provided the user doesn't have access to the firewall (eg. corporate or hotel), and the firewall doesn't allow dynamic port opening through UPnP or NAT-PMP... For those interested, I was tipped through private e-mail about using OpenVPN to open a steady tunnel between the client and Asterisk, and have the SIP client send packets through that tunnel instead of trying to connect directly. I have around 50 Snom 370s configured this way. They work great for remote workers. However the Snom speakerphone is terrible compared to Aastra and Polycom. If there is any background noise it will cut in and out the other party. Ryan -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
Re: [asterisk-users] [NAT] * + private IP + locked-down firewalls?
On Fri, 9 Jul 2010 08:06:04 -0400, Ryan Wagoner rswago...@gmail.com wrote: I have around 50 Snom 370s configured this way. They work great for remote workers. However the Snom speakerphone is terrible compared to Aastra and Polycom. If there is any background noise it will cut in and out the other party. Thanks for the feedback. It's good to know that there's an almost-guaranteed solution to the one-way audio. -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
[asterisk-users] [NAT] * + private IP + locked-down firewalls?
Hello In case Asterisk is used in a private LAN behind a firewall while allowing remote SIP clients to connect from the Net, we must open UDP5060 for SIP and a range of UDP ports (as set in rtp.conf) so let incoming voice packets. Provided the user doesn't have access to the firewall (eg. corporate or hotel), and the firewall doesn't allow dynamic port opening through UPnP or NAT-PMP... 1. Can Asterisk use eg. STUN to open those ports and keep them open through keep-alive packets? If not, is there another solution to solve this issue in this context? 2. In case a dynamic solution is available, does Asterisk provide a tool to monitor that the ports are correctly open, so as to ease problem-solving in case a customer has a problem and needs to be helped over the phone? Knowing that ports on the firewalls are correctly open is one less area to worry about in case Asterisk doesn't work as planned. Thank you. -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
