Just spent hours trying to figure this out and one thing finally popped up. Our connections are coming from outside, they are remote web browsers and sip phones. Every connection to the pfsense firewall is given a dhcp address and never routes to the phone system.
tcp In 69.19.14.31:9623 192.168.10.100:80 CLOSED:SYN_SENT tcp Out 69.19.14.31:9623 192.168.10.100:80 SYN_SENT:CLOSED udp In 67.46.113.30:17243 192.168.10.100:5060 NO_TRAFFIC:SINGLE udp Out 67.46.113.30:17243 192.168.10.100:5060 SINGLE:NO_TRAFFIC tcp In 69.19.14.31:14006 192.168.10.100:80 CLOSED:SYN_SENT tcp Out 69.19.14.31:14006 192.168.10.100:80 SYN_SENT:CLOSED All of these public side connections are given a dhcp address and never get anywhere hehe. On Sun, 8 Nov 2009 11:00:49 -0500, Tony Graziano wrote: > Like I said, make sue they both have the same route for your private > > network. If you have something else, like a L3 switch or another router for > the private network that sipx is using, you should add a static route in > pfsense for the same private network. > > So in pfsense add a static route to your private network but add the gateway > to the same route sipx is running. > ============================ > Tony Graziano, Manager > Telephone: 434.984.8430 > Fax: 434.984.8431 > > Email: [email protected] > > LAN/Telephony/Security and Control Systems Helpdesk: > Telephone: 434.984.8426 > Fax: 434.984.8427 > > Helpdesk Contract Customers: > http://www.myitdepartment.net/gethelp/ > > ----- Original Message ----- > From: [email protected] > <[email protected]> > To: sipx-users <[email protected]> > Sent: Sun Nov 08 10:34:26 2009 > Subject: Re: [sipx-users] PfSense with Sipx for mobile users - Thread Part2 > > On Sun, 8 Nov 2009 10:22:54 -0500, Tony Graziano wrote: >> I would login to the cli of pfsense and make sure it can "ping or >> traceroute" to the sipx server. If the pfsense box is not the default >> route >> for sipx you should add a static route in pfsense for the local network I >> think. >> > I thought I posted that but yes, from cli on pfsense, I can ping/ssh to sipx > by IP or > name. I can also do the same from sipx to pfsense. > >> I see sipx is on 192.168.10.100 so pfsense should also reside in the same >> mask as sipx. They should ping each other and ideally sipx shoukd use >> pfsense as its default route. >> > I changed that outgoing to the 192.168.10.0/24 network. > Even the DHCP addresses don't have to be in the same network, I just did > that as an > initial config to get things going. > > I'm not sure how I can change sipx to have pfsense as it's default route > because then I > would lose access to it from the LAN side would I not? > I don't want to get into dual NICs, multiple gateways and such. Not sure how > I will get > around this. > > > _______________________________________________ > sipx-users mailing list [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users > Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users > sipXecs IP PBX -- http://www.sipfoundry.org/ _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
