<html><head><title>Re: [asterisk-users] Site to site VPN problems</title> <meta charset="utf-8" http-equiv="X-UA-Compatible" content="IE=9; IE=8; IE=7; IE=EDGE" /> </head> <body> <span style=" font-family:'Arial'; font-size: 12pt;">Hello Jan,<br> <br> Tuesday, December 3, 2019, 2:34:46 PM, you wrote:<br> <br> <br> <i>Jan> localnet=192.168.1.0/255.255.255.0<br> Jan> localnet=192.168.3.0/255.255.255.0<br> <br> Jan> Just making sure you have both local subnets listed on both sides, not<br> Jan> just the one.<br> <br> </i>Yes, I have both listed, just trying to minimize noise, but I failed at that. Tried nat=1 but it did not help.<br> <br> -- Ira</body></html>
Hi Ira, On 4/12/19 5:12 pm, Ira wrote:> Re: [asterisk-users] Site to site VPN problems Hello Jan, > > Tuesday, December 3, 2019, 2:34:46 PM, you wrote: > > > /Jan> localnet=192.168.1.0/255.255.255.0 > Jan> localnet=192.168.3.0/255.255.255.0 > > Jan> Just making sure you have both local subnets listed on both > sides, not > Jan> just the one. > > /Yes, I have both listed, just trying to minimize noise, but I failed > at that. Tried nat=1 but it did not help.:-) The next thing to look at is firewall rules. Jan
<html><head><title>Re: [asterisk-users] Site to site VPN problems</title> <meta charset="utf-8" http-equiv="X-UA-Compatible" content="IE=9; IE=8; IE=7; IE=EDGE" /> </head> <body> <span style=" font-family:'Arial'; font-size: 12pt;">Hello Jan,<br> <br> Tuesday, December 3, 2019, 8:49:28 PM, you wrote:<br> <br> Jan> The next thing to look at is firewall rules.<br> <br> <br> So it wasn't the firewall. I eventually fixed it by creating 512 entries for Twilio so no matter what IP they sent it from it had a peer to match. They seem to randomly use one of their range of IPs when sending me calls. I had allowed calls from the suggested.<br> <br> MyDomain.pstn.twilio.com<br> <br> Which worked for about 1 out of 10 or 20 calls, as soon as I added all 512 possible Twilio IPs it all started working fine. Before this I had only 10 Peers and now I have 520 which is really annoying as now the sip show inuse and sip show peers commands are essentially useless because there is to much data.<br> <br> Anyway, thanks so much for trying to help. I found a hint somewhere on the web and then learned how to do templates which at least makes sip.conf reasonable with all those entries.<br> <br> And if you know of a way to make one peer accept a range of IPs, Id love to know that.<br> <br> -- Ira</body></html>