asterisk users - Dec 2009 - Interesting problem with IP's

Have a trunk 1.4 asterisk, running on centos on the lan at work.

A long story, but we had the entire work network on a "public" address
range (90.1.0.x), going to a firewall, then out to the net.

At home (192.168.1.x network) I have a router that connects to the
firewall via a vpn tunnel.

All was great. My cisco 7960 (192.168.1.100) was able to register with
the asterisk server on 90.1.0.76 - and there was no audio  problems
whatsoever. I also must stress that I had nat=no and no nat-specific
flags set in asterisk.

However,the day came where the techs decided that we should be on a
private internal network, and moved all of the devices onto a 10.0.x.x
internal network.

Needless to say, it wasn't an easy task. Now, although my vpn is
connected to the "new" network, and I can access all of the machine as
I used to be able to, I now only have 1-way audio on my phone !! (I
can hear, and it gets progressively worse,the other party cannot hear
me)

Why would this have changed ?  Do I need to do nat stuff now ?  and why ?

Interesting.

Julian

Just a guess, but the connection probably went from full to half duplex.

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Julian
Lyndon-Smith
Sent: Tuesday, December 08, 2009 8:54 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [asterisk-users] Interesting problem with IP's

Have a trunk 1.4 asterisk, running on centos on the lan at work.

A long story, but we had the entire work network on a "public" address
range (90.1.0.x), going to a firewall, then out to the net.

At home (192.168.1.x network) I have a router that connects to the
firewall via a vpn tunnel.

All was great. My cisco 7960 (192.168.1.100) was able to register with
the asterisk server on 90.1.0.76 - and there was no audio  problems
whatsoever. I also must stress that I had nat=no and no nat-specific
flags set in asterisk.

However,the day came where the techs decided that we should be on a
private internal network, and moved all of the devices onto a 10.0.x.x
internal network.

Needless to say, it wasn't an easy task. Now, although my vpn is
connected to the "new" network, and I can access all of the machine as
I used to be able to, I now only have 1-way audio on my phone !! (I
can hear, and it gets progressively worse,the other party cannot hear
me)

Why would this have changed ?  Do I need to do nat stuff now ?  and why ?

Interesting.

Julian

_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Don't forget that many routers treat the designated private address space
differently because it assumes the device is being implemented as a border
router. In this configuration they block most traffic unless you
specifically set rules to permit traffic to flow.

 

-dbc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20091209/29a1217c/attachment.htm