bilal ghayyad
2008-Jan-02 07:33 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
Hi List;
I heared that IAX is good for NATing issues, but I do
not know if it can help me in that senario:
I have two Asterisks machines in different sites and
both are behind NAT (both have private IP address), I
need to link these two asterisks with IAX trunk (if it
help really in such senario), but I do not know if it
will work without doing special routing settings on
the router (like TCP/UDP port mapping or IP
forwarding)? How that will be it if possible? Or I
have to do a kind of port mapping?
If I will need to use port mapping, then I have to map
the TCP and UDP ports that are determined in iax.conf
and rtp.conf files at site A for asterisk ip address
at site A? Or I have to map the TCP and UDP ports that
are in iax.conf and rtp.conf at site B for asterisk ip
address at site A? In other words, if I am at site B
then I have to go for router B and do mapping for
TCP/UDP ports of the asterisk at site B or the
asterisk at site A?
Any help.
Regards
Bilal
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search.
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
Rob Hillis
2008-Jan-02 10:18 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
The reason that IAX2 is considered good for NAT issues is that it uses only one port for both control messages and voice traffic as opposed to SIP that uses a predictable port for control messages and an unpredictable one for voice/video traffic. If both servers are behind NAT servers, you /will/ need to ensure that the appropriate UDP port (by default 4569) are forwarded to your Asterisk servers. Only this port is required - RTP isn't used by IAX2. bilal ghayyad wrote:> Hi List; > > I heared that IAX is good for NATing issues, but I do > not know if it can help me in that senario: > > I have two Asterisks machines in different sites and > both are behind NAT (both have private IP address), I > need to link these two asterisks with IAX trunk (if it > help really in such senario), but I do not know if it > will work without doing special routing settings on > the router (like TCP/UDP port mapping or IP > forwarding)? How that will be it if possible? Or I > have to do a kind of port mapping? > > If I will need to use port mapping, then I have to map > the TCP and UDP ports that are determined in iax.conf > and rtp.conf files at site A for asterisk ip address > at site A? Or I have to map the TCP and UDP ports that > are in iax.conf and rtp.conf at site B for asterisk ip > address at site A? In other words, if I am at site B > then I have to go for router B and do mapping for > TCP/UDP ports of the asterisk at site B or the > asterisk at site A? > > Any help. > Regards > Bilal > > > ____________________________________________________________________________________ > Looking for last minute shopping deals? > Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping > > _______________________________________________ > --Bandwidth and Colocation Provided by http://www.api-digital.com-- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >-------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20080102/f57f98c2/attachment.htm
dave cantera
2008-Jan-02 14:58 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffcc" text="#330000">
bilal,<br>
you are right. you need to add port forwarding (UDP) to your router...
should work nicely then for iax. also, don't forget you iptables
or
firewall port config to accept iax on your * box.<br>
daveC<br>
<br>
bilal ghayyad wrote:
<blockquote cite="mid:994536.35143.qm@web53906.mail.re2.yahoo.com"
type="cite">
<pre wrap="">Hi List;
I heared that IAX is good for NATing issues, but I do
not know if it can help me in that senario:
I have two Asterisks machines in different sites and
both are behind NAT (both have private IP address), I
need to link these two asterisks with IAX trunk (if it
help really in such senario), but I do not know if it
will work without doing special routing settings on
the router (like TCP/UDP port mapping or IP
forwarding)? How that will be it if possible? Or I
have to do a kind of port mapping?
If I will need to use port mapping, then I have to map
the TCP and UDP ports that are determined in iax.conf
and rtp.conf files at site A for asterisk ip address
at site A? Or I have to map the TCP and UDP ports that
are in iax.conf and rtp.conf at site B for asterisk ip
address at site A? In other words, if I am at site B
then I have to go for router B and do mapping for
TCP/UDP ports of the asterisk at site B or the
asterisk at site A?
Any help.
Regards
Bilal
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search. <a
class="moz-txt-link-freetext"
href="http://tools.search.yahoo.com/newsearch/category.php?category=shopping">http://tools.search.yahoo.com/newsearch/category.php?category=shopping</a>
_______________________________________________
--Bandwidth and Colocation Provided by <a
class="moz-txt-link-freetext"
href="http://www.api-digital.com">http://www.api-digital.com</a>--
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
<a class="moz-txt-link-freetext"
href="http://lists.digium.com/mailman/listinfo/asterisk-users">http://lists.digium.com/mailman/listinfo/asterisk-users</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="132">--
My wife's sister is in California.
I should buy her a Videophone2008!
Truly, The Next Best Thing to Being There!
--
WorldWideVideoPhones.com
856.380.0894
</pre>
</body>
</html>
bilal ghayyad
2008-Jan-02 15:26 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
Hi Rob; Big thanks for your kindly help and answer, so rtp.conf file is used by sip and h323 only, correct? In that case if I am going to use the sip trunk then I need to route the UDP ports used by the rtp.conf file and that existed in sip.conf, but really i do not know if any use TCP. Correct? But I would like to ask how all the calls of the trunk (sometimes it could be 30 calls for example) will handled by one port only (in iax protocol)? Does not mean that in huge calls, sip might work better? Your kindly help is high appreciated. Regards Bilal ----------------------- The reason that IAX2 is considered good for NAT issues is that it uses only one port for both control messages and voice traffic as opposed to SIP that uses a predictable port for control messages and an unpredictable one for voice/video traffic. If both servers are behind NAT servers, you /will/ need to ensure that the appropriate UDP port (by default 4569) are forwarded to your Asterisk servers. Only this port is required - RTP isn't used by IAX2. bilal ghayyad wrote:> Hi List; > > I heared that IAX is good for NATing issues, but Ido> not know if it can help me in that senario: > > I have two Asterisks machines in different sites and > both are behind NAT (both have private IP address),I> need to link these two asterisks with IAX trunk (ifit> help really in such senario), but I do not know ifit> will work without doing special routing settings on > the router (like TCP/UDP port mapping or IP > forwarding)? How that will be it if possible? Or I > have to do a kind of port mapping? > > If I will need to use port mapping, then I have tomap> the TCP and UDP ports that are determined iniax.conf> and rtp.conf files at site A for asterisk ip address > at site A? Or I have to map the TCP and UDP portsthat> are in iax.conf and rtp.conf at site B for asteriskip> address at site A? In other words, if I am at site B > then I have to go for router B and do mapping for > TCP/UDP ports of the asterisk at site B or the > asterisk at site A? > > Any help. > Regards > Bilal____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
Andres Paglayan
2008-Jan-03 00:37 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
On Jan 2, 2008, at 12:33 AM, bilal ghayyad wrote:> Hi List; > > I heared that IAX is good for NATing issues, but I do > not know if it can help me in that senario: > > I have two Asterisks machines in different sites and > both are behind NAT (both have private IP address), I > need to link these two asterisks with IAX trunk (if it > help really in such senario), but I do not know if it > will work without doing special routing settings on > the router (like TCP/UDP port mapping or IP > forwarding)? How that will be it if possible? Or I > have to do a kind of port mapping? > > If I will need to use port mapping, then I have to map > the TCP and UDP ports that are determined in iax.conf > and rtp.conf files at site A for asterisk ip address > at site A? Or I have to map the TCP and UDP ports that > are in iax.conf and rtp.conf at site B for asterisk ip > address at site A? In other words, if I am at site B > then I have to go for router B and do mapping for > TCP/UDP ports of the asterisk at site B or the > asterisk at site A?I believe it is mostly a routing thing between your two points, you are not providing info about your routers, and the options are quite endless, if this were my setup what I'd do budget wise is: 1./ setup two IPCops firewall/routers, one at each location, 2./ bridge the two IPCops as if they were in one network using UDP, 3./ shape traffic so VoIP takes priority With this you can either use SIP or IAX as the natting issues are likely to go away, you also get some networking bonus between the two places,> > Any help. > Regards > Bilal > > > > ______________________________________________________________________ > ______________ > Looking for last minute shopping deals? > Find them fast with Yahoo! Search. http://tools.search.yahoo.com/ > newsearch/category.php?category=shopping > > _______________________________________________ > --Bandwidth and Colocation Provided by http://www.api-digital.com-- > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
bilal ghayyad
2008-Jan-18 12:21 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
Hi; Via OpenVPN or port forwarding is known for me, but via SSH is new for me, how I can do it and what is the difference by SSH and OpenVPN? Regards Bilal ----------------------------- Good question. I have never tried tunneling IAX over SSH but it seems like it should work just like anything else. How about a port opened up for OpenVPN. You know you can run IAX on any port you wish, port 80 may work for you if you have some extra external IPs not being used for HTTP. The same is true for OpenVPN. Thanks, Steve Totaro On Jan 17, 2008 8:09 PM, John Constalgie <caduceus_abode at hotmail.com> wrote:> > Hi there > > this is an interesting topic that I see here and aproblem that I am> trying to solve too. > > But I was wondering if the forwarding solution willwork for my case.> > So I have two Asterisk boxes A and B. > > A is behind a corporate NAT such that A can SSH toB, but not vice versa(> "One-way SSH" ) . The UDP port 5060 of the corporateNAT is blocked off and> I will not be able to have it unblocked for securityreasons.> > Hence, is my only choice using an SSH tunnel betweenA and B for the IAX> connection to work? Will it work though with that"One-way SSH" factor> mentioned before? > > Thanks > John____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs
Darrick Hartman (lists)
2008-Jan-18 16:17 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
bilal ghayyad wrote:> Hi; > > Via OpenVPN or port forwarding is known for me, but > via SSH is new for me, how I can do it and what is the > difference by SSH and OpenVPN?SSH uses tcp. Openvpn, by default uses udp. -- Darrick Hartman DJH Solutions, LLC http://www.djhsolutions.com
bilal ghayyad
2008-Jan-18 22:46 UTC
[asterisk-users] Two Asterisks behind NAT and need to link them using IAX trunk
Hi; How can I use SSH in that senario? Is there a link that can help to understand what I have to install and to configure? Regards Bilal ------------------ bilal ghayyad wrote:> Hi; > > Via OpenVPN or port forwarding is known for me, but > via SSH is new for me, how I can do it and what isthe> difference by SSH and OpenVPN?SSH uses tcp. Openvpn, by default uses udp. -- Darrick Hartman DJH Solutions, LLC http://www.djhsolutions.com ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs