Hi, There are also sip aware firewalls available and units to help sip traversal through existing firewalls or nat.
See www.ingate.com and www.intertex.se /Janne > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:sip-implementors- > [EMAIL PROTECTED] On Behalf Of George Petrov Georgiev-Rusiichev > Sent: Wednesday, November 19, 2003 11:18 AM > To: '[EMAIL PROTECTED]' > Cc: Santosh Subramanian, Noida > Subject: Fwd: Re: [Sip-implementors] NAT issue > > > There are few approaches available > > 1. STUN Simple Traversal of User Datagram Protocol (UDP) > Through Network Address Translators (NATs) RFC 3489 > > Here you have STUN server behind NAT, and you STUN client (usually > embedded in SIP UA) which asks for NAT type/IP:port mapping the > server > > 2. UPnP (Universal Plug and Play) > > A client can ask the NAT how it would map a particular IP:port through a > protocol called Universal > Plug and Play (UPnP). This is a solution that is being pushed by Microsoft > (among others). The > client queries the NAT via UPnP asking what mapping it should use if it > wants to receive on port > x. The NAT responds with the IP:port pair that someone on the public > Internet should use to reach > the client on that port. Many NAT device manufacturers have already > included UPnP in their > products. > > If have questions about 1st, I could answer, but I'm not familiar with > 2. and other (there are others) > > > Wednesday, November 19, 2003, 11:34:21 AM, you wrote: > > SSN> Hello all, > SSN> I'm trying to use the sip phone to communicate with external world. > SSN> Scenario is I'm behind the firewall and I need to get a global ip > from > SSN> the NAT, to do that. > > SSN> Scenario > SSN> -------- > > SSN> private IP address range : > SSN> 10.0.0.x : > SSN> : > SSN> : xxx.org > SSN> +-------------+ +-----------+ +------------- > + > SSN> ! !.10 ! NAT / ! publicIP ! > SSN> ! IntHost !-----------! Firewall !----------->>! externalHost! > SSN> ! ! eth0 ! ! ppp0 ! > SSN> +-------------+ +-----------+ +------------- > + > SSN> user: x : > user: test > SSN> : > SSN> : > > SSN> My problem is, How will the UA connected in IntHost, gets the > publicIP from > SSN> NAT? > SSN> what kind of query it should send to NAT..? Once the UA knows the > PublicIP > SSN> only > SSN> it can update the sdp params and contact fields with PublicIP values > (before > SSN> it > SSN> sends packet to proxy). whether my approach is correct or not? How to > do > SSN> this? > > SSN> Kind Regards, > SSN> Santhosh.S > > SSN> _______________________________________________ > SSN> Sip-implementors mailing list > SSN> [EMAIL PROTECTED] > SSN> http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors > > > > -- > George mailto:[EMAIL PROTECTED] > > _______________________________________________ > Sip-implementors mailing list > [EMAIL PROTECTED] > http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors _______________________________________________ Sip-implementors mailing list [EMAIL PROTECTED] http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
