Then you either need to use a sip aware firewall that is also an sbc and remove the nat traversal and remote users roles from sipx, or...
Turn off spi, sip alg on your firewall and ensure it has symmetric nat enabled. ============================ Tony Graziano, Manager Telephone: 434.984.8430 Fax: 434.984.8431 Email: [email protected] LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 Fax: 434.984.8427 Helpdesk Contract Customers: http://www.myitdepartment.net/gethelp/ ----- Original Message ----- From: [email protected] <[email protected]> To: Discussion list for users of sipXecs software <[email protected]> Sent: Tue Oct 05 17:40:36 2010 Subject: Re: [sipx-users] Network Connectivity to SIPX The relationship between dmz and internal networks is NAT. I suppose as remote users. Definitely as pstn. When I say phones, I mean sip phones including software sip phones. On Tue, Oct 5, 2010 at 5:24 PM, Tony Graziano <[email protected]> wrote: > Define the relationship from your dmz to your lan: does it "route" or is > there nat between? If there is nat between, explain if you have enabled > remote users in sipx or not. > > You did not explain "phones" as remote users or as a pstn call. > > More explanation would be helpful. > ============================ > Tony Graziano, Manager > Telephone: 434.984.8430 > Fax: 434.984.8431 > > Email: [email protected] > > LAN/Telephony/Security and Control Systems Helpdesk: > Telephone: 434.984.8426 > Fax: 434.984.8427 > > Helpdesk Contract Customers: > http://www.myitdepartment.net/gethelp/ > > ----- Original Message ----- > From: [email protected] > <[email protected]> > To: [email protected] <[email protected]> > Sent: Tue Oct 05 17:14:08 2010 > Subject: [sipx-users] Network Connectivity to SIPX > > I have a dmz setup. The sipx server is in dmz network. I would like > to connect a phone to sipx server from internal network. I am able to > initiate phone calls from internal network to phones in dmz and there > is sound both ways. However, I am not able to initiate calls from dmz > phones to internal network. > > Looking at registration info, I see that internal network phone ip is > that of external interface of internal firewall. The firewall is sip > aware. > > I am not sure if the problem lies in sipx server is not able to > contact internal phone or my firewall configuration is incorrect. > > I am assuming that since I can connect from behind a firewall over a > wan to a sipx server which is behind a firewall, I should be able to > do this, as well. > > Any help is appreciated. > > Thanks in advance. > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users/ > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users/ > _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/ _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/
