Re: [Astlinux-users] Guidance on configuring NAT on Astlinux

[Michael K. <li...@mk...>]

> Am 05.09.2017 um 13:06 schrieb Michael Knill <mic...@ip...>:
> 
> Hi Michael
> 
> Thanks for that but you misunderstand sorry. 
> Astlinux is on the edge and a SIP PBX is on the inside that will eventually be replaced.
> 
> Regards
> Michael Knill

Yes, I understood it right.
That is the way to do it.

I just assumed the SIP PBX inside is Asterisk-based as well.
If not, maybe there is another way like my trick with "externaddr=xx.xx.xx.xx:5062".

I did this with 3 separate AstLinux PBXs behind one single PFSense firewall on the edge.

> -----Original Message-----
> From: Michael Keuter <li...@mk...>
> Reply-To: AstLinux List <ast...@li...>
> Date: Tuesday, 5 September 2017 at 6:20 pm
> To: AstLinux List <ast...@li...>
> Subject: Re: [Astlinux-users] Guidance on configuring NAT on Astlinux
> 
> 
>> Am 05.09.2017 um 09:16 schrieb Michael Knill <mic...@ip...>:
>> 
>> Hi group
>> 
>> I have a bit of a tricky one that I want to run past the Astlinux firewall experts.
>> 
>> Scenario:
>> An existing PBX (soon to be replaced) using an existing SIP Provider sitting BEHIND an Astlinux appliance which is connected to another SIP Provider.
>> 
>> Should I just be able to do NAT EXT -> LAN to the internal PBX for 5060 & Media Ports using the Source IP Addresses of their current provider? Or do I need to add something in NAT EXT: ?
>> I just recall that I had issues with Astlinux and forwarding 5060 but that was a while ago.
>> 
>> Thanks.
>> 
>> Regards
>> Michael Knill
> 
> Hi Michael,
> 
> I had the same issue. It is quite easy:
> 
> On the PBX behind the main AstLinux box set in sip.conf:
> 
> ; NAT settings
> externaddr=xx.xx.xx.xx:5062 ; this tells the second provider to send the returning packets to port 5062!
> localnet=yy.yy.yy.yy/255.255.255.0
> nat=force_rport,comedia
> 
> Then on the main AstLinux box set NAT EXT -> LAN port 5062 to the IP of the 2nd PBX but on port 5060!
> Then just use different RTP ports then on the edge box. 
> 
> Michael

Michael

http://www.mksolutions.info