Rob, you should describe in more detail your load balancer/firewall. If it is possible, you should use your firewall to NAT the approriate ports for the "PUBLIC" ip address sipxbridge is asserting.
(5060, 30000-31000 UDP). You should also allow those ports outbound. Ifyour ITSP allows it, you should send signalling "out" port 5080, andthey should send signalling back on 5060. What links you use probably wouldn't matter if your firewall can handlethe public IP address PAT/NAT and this way your 3 uplinks wouldn'tmatter. If my assumptions are correct (they may not be, but do correct me if Iam wrong), then your configuration questions/issues center around yourfirewall/load balancer. >>> Rob Hicks <[email protected]> 07/02/09 6:17 PM >>>Tony, Thanks for your response. My experience with sipx is that it binds only to one ip address, eth0 for some reason. The sipx box would run a firewall, iptables configured to only let through the sip traffic. There are two reasons why this seems desirable: 1) we can dedicate a specific high quality internet connection to the sip trunk (back 2 back user agent, right?) and 2) we're using load-balanced, bonded Ethernet connections (3 of them) through our main firewall, which means that the ip address may and does change based upon load and changing ip addresses tend to cause problems at the ITSP or sipx. Would you recommend other ways of doing this? Rob On Thu, Jul 2, 2009 at 3:59 PM, Tony Graziano [email protected]> wrote: Assuming a private and public address? o, it will not work. Two nic's is not supported yet and there is no way to bind specific services to a specific interface. Sipx binds to all. Describing what you are trying to achieve might prove more input. It is NOT a good ide to put sipx outside without a firewall with a public ip address. -----Original Message----- From: Rob Hicks <[email protected]> To: sipXecs mailing list <[email protected]> Sent: 7/2/2009 5:51:58 PM Subject: [sipx-users] Possible Deployment Scenario Hi. Is it possible to deploy sipXecs with a network configuration<http://rob.contractpal.com/>where sipXecs has both a public IP address and a public IP address. Only the Trunking Service would be connected through the public IP address. Thanks! Rob </[email protected]>
_______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
