EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: casteld73 on Saturday 13 February 2010, 11:27:36 pm



Title: Site to Site VPN / SIP Proxy
Post by: casteld73 on Saturday 13 February 2010, 11:27:36 pm
Built a site to site VPN.  In the corp office there is a PBX.  At remote location there is an IP Phone (bwhind Endian FW/OPENVPN).

So I have NAT at both locations.  I understand I need to install the SIP Proxy.  Questions are:

1.  DO I need a SIP proxy at both ther PBX end and the remote location.
2.  Has anyone done this...any hints/tips on QOS and genreal feasability
3.  Is there anything I need to do on the PBX to tell it about the proxy or does it work due to ports SIP and RTP use by default

TIA



Title: Re: Site to Site VPN / SIP Proxy
Post by: xenofenicia on Tuesday 16 February 2010, 09:18:26 am
I have a similar scenario,
two box with EFW , one side with static - pubblic adress, with a ASTERISK PBX
the other one with a NAT addres.
Established VPN all works fine WITHOUT any proxy, and the PHONE (Thomson)
works Fine.
The only thing is putting attention to the "autocofiguration"....BUT i have
configured  the 2 phone side by hand. Comunication in pretty clear and works!

Daniel


Title: Re: Site to Site VPN / SIP Proxy
Post by: casteld73 on Tuesday 02 March 2010, 02:17:19 pm
How does one network have a nat and the other a public???

Corp is 192.168.0.0
Remote is 192.168.10.0

Can I run Site to Site VPN in bridged mode and make both networks have the same subnet.  My phone vendor is telling me NAT is my problem.

My site to site VPN works kind of.   I can ping any thing from the remote network to the home network.  As long as I have the NAT box checked on the client (remote) side.  When I uncheck things donl;t work. 

I opened up my VPN firewall to allow any<>any for testing.  Firewall logs show traffic as accepted.  Both sides.  Must be a routing issue but I am at a loss.  Any advice?

Here is what the client side firewall shows:
Firewall   2010-03-01 22:18:06   VPNFW:ACCEPT:1 UDP (br0) 192.168.10.99:5060 -> 192.168.0.26:5081 (tap1)