Re: [asterisk-users] New thread - SIP over VPN

2009-09-27 Thread Hans Witvliet
On Sat, 2009-09-26 at 22:47 -0700, Dave Platt wrote: Isn't an SSL based tunnel all TCP? There seems to be a good deal of feeling (and evidence) that trying to use TCP as the container for a tunnel is likely to cause more trouble than it solves. Yes, the TCP layer will make the tunnel

[asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Jeff LaCoursiere
On Sat, 26 Sep 2009, Alan Lord (News) wrote: Hmmm, has anyone tried SIP over a VPN? We are thinking of testing this but haven't yet... Al I have a client with Sonicwall VPNs. Asterisk is at head office on internal LAN, six external locations all have Linksys 2102 ATAs and Polycom

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Alex Balashov
I use SIP over OpenVPN incessantly. Works great. Jeff LaCoursiere wrote: On Sat, 26 Sep 2009, Alan Lord (News) wrote: Hmmm, has anyone tried SIP over a VPN? We are thinking of testing this but haven't yet... Al I have a client with Sonicwall VPNs. Asterisk is at head office on

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Frank Bulk
: [asterisk-users] New thread - SIP over VPN On Sat, 26 Sep 2009, Alan Lord (News) wrote: Hmmm, has anyone tried SIP over a VPN? We are thinking of testing this but haven't yet... Al I have a client with Sonicwall VPNs. Asterisk is at head office on internal LAN, six external locations

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread John A. Sullivan III
On Sat, 2009-09-26 at 19:32 +, Jeff LaCoursiere wrote: On Sat, 26 Sep 2009, Alan Lord (News) wrote: Hmmm, has anyone tried SIP over a VPN? We are thinking of testing this but haven't yet... Al I have a client with Sonicwall VPNs. Asterisk is at head office on internal

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Jeff LaCoursiere
On Sat, 26 Sep 2009, John A. Sullivan III wrote: snip We are using SIP over both IPSec and SSL VPNs very successfully with access controls in the tunnel ingress via the ISCS network security management project (http://iscs.sourceforge.net). There are a couple of issues. I'm not sure what

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread John A. Sullivan III
On Sat, 2009-09-26 at 22:09 +, Jeff LaCoursiere wrote: On Sat, 26 Sep 2009, John A. Sullivan III wrote: snip We are using SIP over both IPSec and SSL VPNs very successfully with access controls in the tunnel ingress via the ISCS network security management project

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Hans Witvliet
On Sat, 2009-09-26 at 19:32 +, Jeff LaCoursiere wrote: On Sat, 26 Sep 2009, Alan Lord (News) wrote: Hmmm, has anyone tried SIP over a VPN? We are thinking of testing this but haven't yet... Al I have a client with Sonicwall VPNs. Asterisk is at head office on internal

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Hans Witvliet
On Sat, 2009-09-26 at 22:09 +, Jeff LaCoursiere wrote: On Sat, 26 Sep 2009, John A. Sullivan III wrote: snip We are using SIP over both IPSec and SSL VPNs very successfully with access controls in the tunnel ingress via the ISCS network security management project

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Cary Fitch
Last week I did a Microsoft VPM from one XP computer to another via Verizon broadband wireless. SIP worked ok, but BLF on a Grand Stream 2010 didn't work. In addition to the VPN the phone was behind a NAT router. The phone was already set up behind the NAT Router, the only difference was to

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Frank Bulk
: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Hans Witvliet Sent: Saturday, September 26, 2009 6:06 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] New thread - SIP over VPN snip Re-sending audio packets is waste of resource

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Alex Balashov
point. Frank -Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Hans Witvliet Sent: Saturday, September 26, 2009 6:06 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] New thread - SIP

Re: [asterisk-users] New thread - SIP over VPN

2009-09-26 Thread Dave Platt
Isn't an SSL based tunnel all TCP? Not in the case of OpenVPN. I'm not sure about the commercial offerings. Correct. My recollection is that OpenSSL uses TCP for the setup and management of the tunnel (e.g. authentication and key exchange) and uses UDP to carry the actual payload... each