Again, since your connection is site-to-site and your vpn via ipsec is there, you need to ensure the ipsec is passing/allowing all tcp AND UDP traffic between the two.
Don't confuse things with bringing up pfsense since its not really involved here (I don't think). Re-read my post listing your five steps. Filow that. It will work. ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: [email protected] LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: [email protected] <[email protected]> To: Picher, Michael <[email protected]>; [email protected] <[email protected]> Sent: Tue May 18 08:09:29 2010 Subject: Re: [sipx-users] No Voice/IVR on Site-to-Site Hello Michael, Thank you for your reply. On Tue, May 18, 2010 at 12:38 PM, Picher, Michael <[email protected]>wrote: > I guess it depends on what is creating that tunnel and where NAT lives. > Cisco is creating the GRE tunnel. From Cisco it goes to PfSense FW. I made NAT set to: *Automatic outbound NAT rule generation (IPsec passthrough)* I think NAT is not necessary since traffic is passing thru the GRE Tunnel and not going out. You can correct me if I'm wrong here. Hoping for your usual response. Many thanks and have a nice day! Rhon > > Your diagram (to me) shows your PBX behind pfSense and then going into > some > sort of Cisco device with a GRE tunnel between the Cisco devices. So, is > the PBX traffic really NAT’d? Where does the Tunnel terminate? Your > information is incomplete. > I don't think pbx traffic is NAT'd. Here's my ip topology: SITE A: Cisco/PFSense subnet: 192.168.1.0 Voice Subnet: 192.168.2.0 Tunnel: 10.10.10.1 SITE B: Cisco/PFSense subnet: 172.16.1.0 Voice Subnet: 172.16.2.0 Tunnel: 10.10.10.2 > I assumed (maybe wrongly) that your PBX was behind the pfSense box and > NAT’d. > I not sure how to test this. But please note that we can establish connection using X-Lite via site-to-site without problems. Connection can be established on each sites flawlessly. > > > Mike > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Rhon > *Sent:* Tuesday, May 18, 2010 1:01 AM > > *To:* [email protected] > *Subject:* Re: [sipx-users] No Voice/IVR on Site-to-Site > > > > I'm using IPSEC GRE and pfsense interfaces have private IPs. should I > still > need NAT for that matter? > > Thanks > > On Tue, May 18, 2010 at 3:03 AM, Picher, Michael > <[email protected]> > wrote: > > It should be set to manual and yes. > > > > *From:* Rhon [mailto:[email protected]] > *Sent:* Monday, May 17, 2010 9:33 AM > *To:* Picher, Michael; [email protected] > *Subject:* Re: [sipx-users] No Voice/IVR on Site-to-Site > > > > Hello Michael, > > I have the static NAT port set to NO on pfsense. > > Also, to I have to enable NAT traversal on sipx? > > Thanks > > On Mon, May 17, 2010 at 3:20 PM, Picher, Michael > <[email protected]> > wrote: > > Static NAT port on the pfSense? > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Rhon > *Sent:* Monday, May 17, 2010 9:14 AM > *To:* [email protected] > *Subject:* [sipx-users] No Voice/IVR on Site-to-Site > > > > Hi, > > I have a problem with our deployment with SipXecs 4.2 which was installed > fresh using ISO build. > > We cannot hear anything on both sides but are able to connect and can ring > the other end. Calling the IVR is ok but no audio as well. > > SITE A: > 100 - 199 > > SITE B: > 200 - 299 > > Everything passed using Configurations tests. > > Our networks are setup as seen below: > > SITE A SIPX --> PFSENSE --> CISCO --> |||| VIA GRE TUNNEL |||| <-- CISCO > <-- PFSENSE <-- SIPX SITEB > > Any thoughts on what the problem could be? > > I have bypassed everything on the firewall at the moment. > > Thank you in advance. > > Rhon > > > > > _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
