similar to: Sip over cisco VPN

I have a Cisco VPN Concentrator 3000, It has the ability to auth PPTP tunnels off of a WinNT Domain controler. Well, I to use my samba3 box instead of a WinNT box. I have samba3 running off of an LDAP back end. Anyway, I setup the VPN Concentrator to auth off of the samba box, and when I test it with the test option, and it works, but when I try to auth a pptp tunnel, it fails saying the

IF you are not stuck to IPSec, you might want to take a look at OpenVPN (www.openvpn.org). I found OpenVPN easier to install than FreeSWAN (an IPSEC VPN) and have setup an OpenVPN solution between my German office and our mainoffice in a matter of hours. Thom van der Boon E-Mail: Thom.van.der.Boon at vdb.nl ===== Thom.H. van der Boon b.v. Havens 563 Jan Evertsenweg 2-4 NL-3115 JA Schiedam

Anyone got a resource on setting up a CentOS box to connect to a Cisco PIX 5xx VPN using IPSec? I don't know if it matters but an important part of functionality would be split tunneling, I need to maintain that from the windows side of functionality. Thanks! jlc

Hi list, I am trying to create a VPN between two different locations. On the first location we have a cisco pix 525 Natting the internal 192.168.100.x network, while on the second location we have a Centos3 box Natting via iptables the internal 192.168.10.x netowrk. My goal is to connect this 2 over the internet via IPsec. I created the IPsec Net2Net via the network configuration graphic

Hi, I have the Cisco PIX 506 firewall right in front of the asterisk and I am getting a one-way audio. I need your help/guidance to resolve this problem. I have the "fixups" disabled for SIP in the Cisco PIX 506. Any help rendered by you in this subject is greatly appreciated. I have been breaking my head trying to resolve this problem for more than one month. I have included the

I have Asterisk server providing phone service for my company. The server is behind a PIX-515 FW and is assigned a private address 192.168.11.X/24. With that said what is best to provide remote SIP phones (home offices) securely. If the solution is to put up another Asterisk server with a public IP address I am opposed to that. I am looking for the a secure reliable solution to set up remote SIP

does anyone have a sip working through a cisco pix firewall? i can get the phone to register and the call to be negotiated, but as soon as the call is answered there is no sound and the call ends immediately. im sure this is due to the RTP negotiation being rejected by the pix. any helpful ways around this? right now my only solution is to put a small box outside the firewall and IAX the

I've got multiple satellite office all linked back to the main office via VPN. Each office has their own asterisk server which registers back to the main office's Asterisk server. Each office also has a 1Mb downstream / 384k - 768k upstream connection. The branches are using Speex for their connections back to the main office. The issue I'm having is that there are times that

I cannot get incoming calls to sip phones behind a PIX to work, outgoing is fine. Asterisk (Public IP) --> Internet --> PIX (NAT) --> Sip Phones I have tried no fixup protocol sip, I have punched a hole in the Pix allowing anything from the Asterisk box into the network, still no incoming. I have done all the Wiki suggests in regarding to NAT. Is their a trick getting the

Hi, I have about 10 Cisco 7960s behind a PIX 506E (IOS v6.3) firewall. After some period of time, asterisk says that some of them are unreachable, and the phones lose their registration. The only way to make the phones recover is to clear the NAT translation tables for the phones on the PIX (clear xlate...) Does anyone know how to fix this? As you can imagine, it is quite annoying. And it does not

Hi, I?ve been reading up on SSO-based logins for the last couple of weeks. I?ve found a lot of information about it, but nothing that matches my situation. Here?s the gist of my situation... - I have a Samba 3 PDC in our corporate office as well as three remote offices. - Each remote office is in a different physical building and connected to the Corporate office either via Point-to-Point T-1

Hey All, Sometimes we are running into issues with calls randomly being disconnected. We have a couple of phones is in a remote office. We have a PIX-to-PIX VPN setup between the offices. I know neither of these devices provide QOS but we usually don't run into any problems. I notice this problem when we are in a conference call with one of the employees at the remote office and a

Hi everyone, I'm very new to all this, so please forgive me if I have the terminology mixed-up. We are preparing to install an Asterisk IP PBX over the weekend and I have an issue with the Polycom SP 500 phones we are trying to use. My problem is regarding DHCP. Our DHCP server is our Cisco PIX 501 firewall. I've specified option 66 and the phones connect to the FTP server

On Wed, 23 Jul 2003, Yifang Dai wrote: > I wish! My company just spend a lot $$ on the shinny CCM phone system, so I > don't think I can change that easily... But if I can get asterisk to > talk to CCM via h323, and prove it's usefulness, I might have a chance > to use * in the branches... Well, good luck, then! > By the way, do you know if we can get *'s VM to

Hi all, I'm having sudden MWI problems. Everything else on the phone works fine though. I have three Cisco 7940s. Asterisk server is behind a firewall running NAT. (192.168.1.202/24) Phone #1 - On the same subnet 192.168.1.250. Everything works great. Phone #2 - On a different subnet, 192.168.2.0/24. Everything works fine except the MWI. It never comes on. This is over an IPSEC VPN, but

Can anyone point me in a good direction for configuring SIP through a PIX using 1:1 NAT. I have read anything I could get my hands on and tried them all with very little success. I can get it to work through the cheap little cable modem routers, but not this PIX. I -can- make a direct SIP call using the IP address of the * server (ie.exten@ipaddr), but when I do that * still doesn't

All, With the dual-ISP support in the latest versions of Shorewall, is it also possible to setup dual-VPN with something like OpenVPN? If so, what are the high levels steps that would need to be completed? Aaron

>> Isn't an SSL based tunnel all TCP? > Not in the case of OpenVPN. I'm not sure about the commercial > offerings. Correct. My recollection is that OpenSSL uses TCP for the setup and management of the tunnel (e.g. authentication and key exchange) and uses UDP to carry the actual payload... each tunneled IP packet is wrapped in a UDP datagram. That way, the UDP transport

I am completely new to * ( I know read the archives but this is a little different case) I am trying to setup a Sip system out side my security firewalls for home users. I currently run a Cisco avvid solution internally but it's highly firwalled. I am planning on building a pri out of my 3745 cisco router and pluging it in to a 3810 which is on the outside setup with sip and running a *

we have an external 2Mbit dsl connection and running on it are several gre vpn tunnels so far i''ve given priority to the vpn traffic (using htb) can i now put rules in for the tunnels to control traffic within each tunnel (that''s where our video conferencing etc runs)? or can i only control the real interface (eth1 in our setup)? if not can i somehow see the packets inside the