If the phones are not in the same sub net and they have to pass through Nat in order to get to the server only the sipx server IP (/32) should be added. On Feb 20, 2012 3:42 PM, "glomos-info" <[email protected]> wrote:
> Hi Matt,**** > > ** ** > > The NIC in the Sipx box has a true public IP address. The unit is safe > guarded by a true bridging firewall that is transparent to the sipx > machine. Only the required traffic is passed true. No NAT or any port > forwarding involved. **** > > ** ** > > The Public ip address under Internet calling tab is the correct one.**** > > ** ** > > How can I check if the phones are remote? Is there an indicator for that > in the ‘contact’string? Or is it just the public ip’s that are listed.**** > > ** ** > > The current defined local subnet is the public ip range e.g.: > 80.95.123.208/28**** > > Should I change it to only the public IP address itself?**** > > ** ** > > Thanks in advance,**** > > GJ**** > > ** ** > > *Van:* [email protected] [mailto: > [email protected]] *Namens *Matt White > *Verzonden:* maandag 20 februari 2012 20:28 > *Aan:* [email protected] > *Onderwerp:* Re: [sipx-users] Welcome to the "sipx-users" mailing list**** > > ** ** > > When you say your server has a public ip address, do you mean the nic on > the server has the public ip assigned to it or that you have a firewall > that port forwards/NATS the public ip to your sipx server? If you do have > the sipx server outside of a firewall you will want to take great care > making sure iptables is done well on sipx. Otherwise you will get DoS real > fast. > > There are a couple of other settings that work in conjunction with the NAT > travesal setting. They are the server "public ip address" that is set > under the server tab and then the page and the "intranet subnets" under > the internet calling tab. > > But if your server truly has a public ip then they should be enabled. The > NAT checkbox allows sipxrelay to re-write the SIP header and inject the > "public ip" rather than the private IP. It can do this selectivity based > on the intranet subnet of the phone. It also allows it to anchor the > media. If it thinks the phones are local, it will not anchor the media > when calling between the endpoints. > > You can see if the phones show as remote by looking at the register page. > What you could do is set the public ip as the only only local subnet, and > that would make it anchor all media. > > -m > > >>> glomos-info <[email protected]> 02/20/12 12:36 PM >>> > Dear all, > > We have deployed a Sipxecs 4.4 server (latest fixes) and are experiencing > problems with NAT traversal. > > Our server has a public IP address. > We have a SIP trunk configured to an ITSP. > We are using a combination of remote Sip phones both on NAT and without > NAT. > For supporting the NAT users, the NAT traversal option has been enabled. > > The problem is that using this configuration the non-NAT phones work OK, > but the NAT phones do not setup an RTP connection correctly (no sound both > ways). > > After we enable the 'server behind NAT' checkbox both NAT and non-NAT are > able to connect successfully. > But with the 'server behind NAT' checkbox enabled the non-NAT phones will > lose RTP connection after about 5 minutes on inbound phone calls (session > will stay, but sound drops). Outbound phone calls have no problem. > The NAT phones though work perfectly (both inbound and outbound) with the > 'server behind NAT' setting enabled. > > What are we doing wrong? What does the 'server behind NAT' checkbox > exactly do, related to NAT traversal? > Why do we have to enable it to get our NAT phones working while our server > has a public IP? > > Help is appreciated very much. > > Thanks, > GJ > > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users/**** > > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users/ > -- LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 sip: [email protected] Helpdesk Customers: http://myhelp.myitdepartment.net Blog: http://blog.myitdepartment.net
_______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/
