To clarify this, if all your sip traffic is happening over vpn's sipx won't care to know its behind nat. Only when its behind nat and handling siptrunks via sipxbridhe as an sbc or handling remote users via the internet (without vpn). ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431
Email: [email protected] LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: Tony Graziano <[email protected]> To: [email protected] <[email protected]> Cc: [email protected] <[email protected]> Sent: Sun May 02 10:56:38 2010 Subject: Re: [sipx-users] IPSec VPN and Sipx 4.2 If you are not using sipxbridge, server behind nat is not needed. What kind of phone is it? Bootrom and firmware is important too. A siptrace of that call will be helpful. ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: [email protected] LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: Jermaine Pinder <[email protected]> To: [email protected] <[email protected]> Cc: [email protected] <[email protected]> Sent: Sun May 02 09:41:04 2010 Subject: Re: [sipx-users] IPSec VPN and Sipx 4.2 They are registered using the private address at the far end sip:[email protected] <sip:[email protected];x-sipX-nonat> sip:[email protected] <sip:[email protected];x-sipX-nonat> They are also using a DNS locl to them (the far end router/ipsec device) My server settings are checked "Server is behind nat" (because that's needed because I'm behind a pfsense firewall) What actually happens is; I call into the AA and then enters the extension, the AA after 2 seconds say the user I'm trying to reach is unavailable.. the weird thing is I see the phone try to dial then just stops with 1 miss call. -----Original Message----- From: "Tony Graziano" [[email protected]] Date: 05/02/2010 08:45 AM To: "Jermaine Pinder" <[email protected]> CC: [email protected] Subject: Re: [sipx-users] IPSec VPN and Sipx 4.2 Look at your registrations.. Do they show registered at the ipsec address or the public address with the private contact address the phone is using? or are they registered at the private address at the far end (should be). They should also be set to use a DNS (local to them or the sipx dns server) so they resolve it as a private address (the server is behind nat). Can two users on the far end call each other? I think this is possibly a case in how they route, period. If their default route is a local gateway, the handset might be trying to contact without regard to sipx... outside caller--->sipx--->---vpn to remote user--->remote user || back out to itsp<---local gateway <-- >From the local network where the users are are you able to resolve your sipdomain to the correct IP address? Do you possibly have "Internet calling" enabled? On Sun, May 2, 2010 at 7:58 AM, Jermaine Pinder <[email protected]> wrote: I only have "Server Behind NAT" checked and they are using the remote site VPNs DNS... I can make calls out with no issues I just cant receive calls... would that still be DNS? -----Original Message----- From: "Tony Graziano" [[email protected]] Date: 05/02/2010 07:45 AM To: "Jermaine Pinder" <[email protected]> CC: [email protected] Subject: Re: [sipx-users] IPSec VPN and Sipx 4.2 Please ensure "Internet Calling" is disabled. The VPN phones also need to resolve your SIP server as an internal address. What DNS are they using? On Sun, May 2, 2010 at 7:04 AM, Jermaine Pinder <[email protected]> wrote: (Basically I cant receive calls on my remote VPN phones, but I can call out and I can call any extension) IPSec VPN and Sipx 4.2 Greetings, I have a few sites that has an IPSec VPN setup between them. I also have a few phones at the remote VPN locations that registers OK and can make calls out but I cant receive a call in. I get the message the user is not available but the phone is register with no issues. Heres what I have done so far. > Disables NAT Traversal for Remote Users (dont need this since its a VPN) > setup a phone profile for all my remote vPN phones to use the servers IP > as the registration server > Added all my Intranet Subnets to match my VPN Remote IP subnet Am I missing anything? Thanks _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/ -- ====================== Tony Graziano, Manager Telephone: 434.984.8430 sip: [email protected] Fax: 434.984.8431 Email: [email protected] LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 sip: [email protected] Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ Why do mathematicians always confuse Halloween and Christmas? Because 31 Oct = 25 Dec. -- ====================== Tony Graziano, Manager Telephone: 434.984.8430 sip: [email protected] Fax: 434.984.8431 Email: [email protected] LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 sip: [email protected] Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ Why do mathematicians always confuse Halloween and Christmas? Because 31 Oct = 25 Dec. _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
