Is anybody making calls over VPN? If so what is the "penalty" as encryption is involved. I was planning to use VPN to register Sipura units to my local asterisk this way I don't have to deal with NAT issues. -- #Joseph
We did a setup of 70 sites connected back to a central Asterisk box, and it worked very well over an MPLS VPN. regards, PaulH AsteriskIT www.asteriskit.com.au On Tue, 2006-08-22 at 20:43 -0600, Joseph wrote:> Is anybody making calls over VPN? If so what is the "penalty" as > encryption is involved. > I was planning to use VPN to register Sipura units to my local asterisk > this way I don't have to deal with NAT issues. >
> We did a setup of 70 sites connected back to a central Asterisk box, and > it worked very well over an MPLS VPN. > > regards, > > PaulH > AsteriskIT > www.asteriskit.com.auThe best part about VPN is that it makes it harder for the ISPs to track and mess with. ;-) -- Henry J. Cobb http://www.io.com/~hcobb/
Funnily enough, in this case the ISP supported our choice of running Asterisk... PaulH AsteriskIT www.asteriskit.com.au On Tue, 2006-08-22 at 22:04 -0500, Henry J. Cobb wrote:> > We did a setup of 70 sites connected back to a central Asterisk box, and > > it worked very well over an MPLS VPN. > > > > regards, > > > > PaulH > > AsteriskIT > > www.asteriskit.com.au > > The best part about VPN is that it makes it harder for the ISPs to track > and mess with. ;-) >
Joseph wrote:> Is anybody making calls over VPN? If so what is the "penalty" as > encryption is involved. > I was planning to use VPN to register Sipura units to my local asterisk > this way I don't have to deal with NAT issues. >vpn's work just fine as long as the vpn end-points have enough horsepower to encrypt/decrypt packets without delay. As one example only, some of the older cisco routers didn't have enough horsepower to sustain any significant amounts of vpn traffic without installing an optional vpn hardware card. I'd have to guess this might also be true with some inexpensive boxes like Linksys as well.
We've done this with OpenVPN and it works fine. I'd recommend that the VPN server is not on the same box as Asterisk. Stick it on a firewall/gateway box giving access to the network containing the Asterisk boxes behind it. This way the Asterisk box(es) is seeing normal unencrypted traffic and the VPN server(s) can be specified to meet the VPN requirement. On 8/23/06, Joseph <syscon@interbaun.com> wrote:> > Is anybody making calls over VPN? If so what is the "penalty" as > encryption is involved. > I was planning to use VPN to register Sipura units to my local asterisk > this way I don't have to deal with NAT issues. > > -- > #Joseph > _______________________________________________ > --Bandwidth and Colocation provided by Easynews.com -- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >-------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20060823/02adee35/attachment.htm