thr3ads.net - asterisk users - [asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk [Jan 2008]

If this information is useful, please help other people find it:
Share via:

bilal ghayyad

2008-Jan-02 07:33 UTC

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

Hi List;

I heared that IAX is good for NATing issues, but I do
not know if it can help me in that senario:

I have two Asterisks machines in different sites and
both are behind NAT (both have private IP address), I
need to link these two asterisks with IAX trunk (if it
help really in such senario), but I do not know if it
will work without doing special routing settings on
the router (like TCP/UDP port mapping or IP
forwarding)? How that will be it if possible? Or I
have to do a kind of port mapping?

If I will need to use port mapping, then I have to map
the TCP and UDP ports that are determined in iax.conf
and rtp.conf files at site A for asterisk ip address
at site A? Or I have to map the TCP and UDP ports that
are in iax.conf and rtp.conf at site B for asterisk ip
address at site A? In other words, if I am at site B
then I have to go for router B and do mapping for
TCP/UDP ports of the asterisk at site B or the
asterisk at site A?

Any help.
Regards
Bilal


     
____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search. 
http://tools.search.yahoo.com/newsearch/category.php?category=shopping

Rob Hillis

2008-Jan-02 10:18 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

The reason that IAX2 is considered good for NAT issues is that it uses
only one port for both control messages and voice traffic as opposed to
SIP that uses a predictable port for control messages and an
unpredictable one for voice/video traffic.

If both servers are behind NAT servers, you /will/ need to ensure that
the appropriate UDP port (by default 4569) are forwarded to your
Asterisk servers.  Only this port is required - RTP isn't used by IAX2.

bilal ghayyad wrote:> Hi List;
>
> I heared that IAX is good for NATing issues, but I do
> not know if it can help me in that senario:
>
> I have two Asterisks machines in different sites and
> both are behind NAT (both have private IP address), I
> need to link these two asterisks with IAX trunk (if it
> help really in such senario), but I do not know if it
> will work without doing special routing settings on
> the router (like TCP/UDP port mapping or IP
> forwarding)? How that will be it if possible? Or I
> have to do a kind of port mapping?
>
> If I will need to use port mapping, then I have to map
> the TCP and UDP ports that are determined in iax.conf
> and rtp.conf files at site A for asterisk ip address
> at site A? Or I have to map the TCP and UDP ports that
> are in iax.conf and rtp.conf at site B for asterisk ip
> address at site A? In other words, if I am at site B
> then I have to go for router B and do mapping for
> TCP/UDP ports of the asterisk at site B or the
> asterisk at site A?
>
> Any help.
> Regards
> Bilal
>
>
>      
____________________________________________________________________________________
> Looking for last minute shopping deals?  
> Find them fast with Yahoo! Search. 
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
>
> _______________________________________________
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>   -------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20080102/f57f98c2/attachment.htm

dave cantera

2008-Jan-02 14:58 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffcc" text="#330000">
bilal,<br>
you are right.&nbsp; you need to add port forwarding (UDP) to your router...
should work nicely then for iax.&nbsp; also, don't forget you iptables
or
firewall port config to accept iax on your * box.<br>
daveC<br>
<br>
bilal ghayyad wrote:
<blockquote cite="mid:994536.35143.qm@web53906.mail.re2.yahoo.com"
 type="cite">
  <pre wrap="">Hi List;

I heared that IAX is good for NATing issues, but I do
not know if it can help me in that senario:

I have two Asterisks machines in different sites and
both are behind NAT (both have private IP address), I
need to link these two asterisks with IAX trunk (if it
help really in such senario), but I do not know if it
will work without doing special routing settings on
the router (like TCP/UDP port mapping or IP
forwarding)? How that will be it if possible? Or I
have to do a kind of port mapping?

If I will need to use port mapping, then I have to map
the TCP and UDP ports that are determined in iax.conf
and rtp.conf files at site A for asterisk ip address
at site A? Or I have to map the TCP and UDP ports that
are in iax.conf and rtp.conf at site B for asterisk ip
address at site A? In other words, if I am at site B
then I have to go for router B and do mapping for
TCP/UDP ports of the asterisk at site B or the
asterisk at site A?

Any help.
Regards
Bilal


     
____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  <a
class="moz-txt-link-freetext"
href="http://tools.search.yahoo.com/newsearch/category.php?category=shopping">http://tools.search.yahoo.com/newsearch/category.php?category=shopping</a>

_______________________________________________
--Bandwidth and Colocation Provided by <a
class="moz-txt-link-freetext"
href="http://www.api-digital.com">http://www.api-digital.com</a>--

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   <a class="moz-txt-link-freetext"
href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a>



  </pre>
</blockquote>
<br>
<pre class="moz-signature" cols="132">-- 
My wife's sister is in California.  
I should buy her a Videophone2008!

Truly, The Next Best Thing to Being There!
--

WorldWideVideoPhones.com
856.380.0894


</pre>
</body>
</html>

bilal ghayyad

2008-Jan-02 15:26 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

Hi Rob;

Big thanks for your kindly help and answer, so
rtp.conf file is used by sip and h323 only, correct?
In that case if I am going to use the sip trunk then I
need to route the UDP ports used by the rtp.conf file
and that existed in sip.conf, but really i do not know
if any use TCP. Correct?

But I would like to ask how all the calls of the trunk
(sometimes it could be 30 calls for example) will
handled by one port only (in iax protocol)? Does not
mean that in huge calls, sip might work better?

Your kindly help is high appreciated.
Regards
Bilal

-----------------------
The reason that IAX2 is considered good for NAT issues
is that it uses
only one port for both control messages and voice
traffic as opposed to
SIP that uses a predictable port for control messages
and an
unpredictable one for voice/video traffic.

If both servers are behind NAT servers, you /will/
need to ensure that
the appropriate UDP port (by default 4569) are
forwarded to your
Asterisk servers.  Only this port is required - RTP
isn't used by IAX2.

bilal ghayyad wrote:> Hi List;
>
> I heared that IAX is good for NATing issues, but I
do> not know if it can help me in that senario:
>
> I have two Asterisks machines in different sites and
> both are behind NAT (both have private IP address),
I> need to link these two asterisks with IAX trunk (if
it> help really in such senario), but I do not know if
it> will work without doing special routing settings on
> the router (like TCP/UDP port mapping or IP
> forwarding)? How that will be it if possible? Or I
> have to do a kind of port mapping?
>
> If I will need to use port mapping, then I have to
map> the TCP and UDP ports that are determined in
iax.conf> and rtp.conf files at site A for asterisk ip address
> at site A? Or I have to map the TCP and UDP ports
that> are in iax.conf and rtp.conf at site B for asterisk
ip> address at site A? In other words, if I am at site B
> then I have to go for router B and do mapping for
> TCP/UDP ports of the asterisk at site B or the
> asterisk at site A?
>
> Any help.
> Regards
> Bilal

____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search. 
http://tools.search.yahoo.com/newsearch/category.php?category=shopping

Andres Paglayan

2008-Jan-03 00:37 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

On Jan 2, 2008, at 12:33 AM, bilal ghayyad wrote:
> Hi List;
>
> I heared that IAX is good for NATing issues, but I do
> not know if it can help me in that senario:
>
> I have two Asterisks machines in different sites and
> both are behind NAT (both have private IP address), I
> need to link these two asterisks with IAX trunk (if it
> help really in such senario), but I do not know if it
> will work without doing special routing settings on
> the router (like TCP/UDP port mapping or IP
> forwarding)? How that will be it if possible? Or I
> have to do a kind of port mapping?
>
> If I will need to use port mapping, then I have to map
> the TCP and UDP ports that are determined in iax.conf
> and rtp.conf files at site A for asterisk ip address
> at site A? Or I have to map the TCP and UDP ports that
> are in iax.conf and rtp.conf at site B for asterisk ip
> address at site A? In other words, if I am at site B
> then I have to go for router B and do mapping for
> TCP/UDP ports of the asterisk at site B or the
> asterisk at site A?
I believe it is mostly a routing thing between your two points,
you are not providing info about your routers,
and the options are quite endless,

if this were my setup what I'd do budget wise is:

1./ setup two IPCops firewall/routers, one at each location,
2./ bridge the two IPCops as if they were in one network using UDP,
3./ shape traffic so VoIP takes priority

With this you can either use SIP or IAX as the natting issues are  
likely to go away,
you also get some networking bonus between the two places,

>
> Any help.
> Regards
> Bilal
>
>
>        
> ______________________________________________________________________ 
> ______________
> Looking for last minute shopping deals?
> Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/ 
> newsearch/category.php?category=shopping
>
> _______________________________________________
> --Bandwidth and Colocation Provided by http://www.api-digital.com--
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users

bilal ghayyad

2008-Jan-18 12:21 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

Hi;

Via OpenVPN or port forwarding is known for me, but
via SSH is new for me, how I can do it and what is the
difference by SSH and OpenVPN?

Regards
Bilal

-----------------------------
Good question.  I have never tried tunneling IAX over
SSH but it seems
 like
it should work just like anything else.

How about a port opened up for OpenVPN.  You know you
can run IAX on
 any
port you wish, port 80 may work for you if you have
some extra external
 IPs
not being used for HTTP.  The same is true for
OpenVPN.

Thanks,
Steve Totaro

On Jan 17, 2008 8:09 PM, John Constalgie
<caduceus_abode at hotmail.com>
 wrote:
>
> Hi there
>
> this is an interesting topic that I see here and a
problem that I am> trying to solve too.
>
> But I was wondering if the forwarding solution will
work for my case.>
> So I have two Asterisk boxes A and B.
>
> A is behind a corporate NAT such that A can SSH toB, but not vice
 versa(> "One-way SSH" ) . The UDP port 5060 of the corporateNAT is blocked
 off and> I will not be able to have it unblocked for security
reasons.>
> Hence, is my only choice using an SSH tunnel betweenA and B for the
 IAX> connection to work? Will it work though with that"One-way SSH"
 factor> mentioned before?
>
> Thanks
> John

____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs

Darrick Hartman (lists)

2008-Jan-18 16:17 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

bilal ghayyad wrote:> Hi;
> 
> Via OpenVPN or port forwarding is known for me, but
> via SSH is new for me, how I can do it and what is the
> difference by SSH and OpenVPN?
SSH uses tcp.  Openvpn, by default uses udp.

-- 
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.com

bilal ghayyad

2008-Jan-18 22:46 UTC

head link

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

Hi;

How can I use SSH in that senario? Is there a link
that can help to understand what I have to install and
to configure?

Regards
Bilal

------------------

bilal ghayyad wrote:> Hi;
> 
> Via OpenVPN or port forwarding is known for me, but
> via SSH is new for me, how I can do it and what is
the> difference by SSH and OpenVPN?
SSH uses tcp.  Openvpn, by default uses udp.

-- 
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.com

____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs

Apparently Analagous Threads

Search for more reasonably related threads

asterisk users - Jan 2008 - Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk

Apparently Analagous Threads