Massimo, I'll expand on what the others have said...
In the sipXecs SIP world, conversations are device to device. That is, phone to phone and phone to gateway. For the most part the sipXecs PBX acts as a call router unless a device is talking to the media services (AA, ACD, VoiceMail, etc.). So basically what we're saying is that your phones AND your PBX all need access to the gateway (and vice versa). I would think you'd want TCP ad UDP 5060 through 5080 and then for RTP traffic UDP 10000 - 20000 (although this can vary). This is one of the big reasons I utilize VLans when I setup phone systems. With VLans I can have all my voice resources in one VLan and all my data resources in a separate one. If I want to secure the setup more, I can place a single firewall between the two VLans. The trick to making this work with a single switch port per user is to make all the pc/phone ports VLan trunks carrying both the Data and Phone VLans (with the Data VLan being the Untagged/Native/Default). Then hard code your phones to tag their traffic for the phone VLan. PC's don't tag their traffic so they end up in the Data VLan since it is the default for the port. Mike > -----Original Message----- > From: [email protected] [mailto:sipx-users- > [email protected]] On Behalf Of Massimo Vignone > Sent: Saturday, March 28, 2009 11:10 AM > To: sipX users > Subject: [sipx-users] Smartnode Gateways ACL troubles > > Hi everybody, > > After configuring my Patton Smartonode gateways with the following ACL, > call pickups of PSTN originated calls don't work anymore. I've > experienced also some RTP problems. > > Here's the acl: > > ... > profile acl SIP-IN > permit 1 ip host 192.168.1.1 any > permit 2 ip host 192.168.1.2 any > deny 3 tcp any any eq 5060 > deny 4 udp any any eq 5060 > permit 5 ip any any > > context ip router > > interface LAN > ipaddress 192.168.1.3 255.255.255.0 > use profile acl SIP-IN in > tcp adjust-mss rx mtu > tcp adjust-mss tx mtu > ... > > Can you explain me why? > > Thanks, > > Max > > -- > > Massimo Vignone > UniMORE - Servizi Informatici - Reti e Sistemi > > Phone: +39.059.2058032 Fax: +39.059.2058034 > sip:[email protected] ISN:8032*881 > > > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users > Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
