Re: [sipx-users] Phones behind Nat/Pat firewall do not work

[Emery ville <emeryvilleberkley@xxxxxxxxx>]

Hey Guys thanks for all the valuable information I will reply back /i have tested them as you have directed me to...

thanks,

emery

On Tue, Jun 30, 2009 at 6:45 PM, Picher, Michael <mpicher@xxxxxxxxxxxxxxxx> wrote:

Well, he said he tested behind his ASA and it didn't work...  the reason
it didn't is because the SIP ALG is on by default in the ASA.

With the sipX box running outside the firewall there is no need for the
SBC on the sipX box.  Point your phones at stun01.sipphone.com for a
stun server and it should work.

If it were me, I'd prefer to have my sipX box behind the firewall.

Mike

-----Original Message-----
From: Tony Graziano [mailto:tgraziano@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, June 30, 2009 9:31 PM
To: Picher, Michael; emeryvilleberkley@xxxxxxxxx
Cc: sipx-users@xxxxxxxxxxxxxxxxxxx

Subject: Re: [sipx-users] Phones behind Nat/Pat firewall do not work

His server has a public ip address.
-----Original Message-----
From: "Picher, Michael" <mpicher@xxxxxxxxxxxxxxxx>
To: Tony Graziano <tgraziano@xxxxxxxxxxxxxxxxxx>
To: Emery ville <emeryvilleberkley@xxxxxxxxx>
Cc:  <sipx-users@xxxxxxxxxxxxxxxxxxx>

Sent: 6/30/2009 9:27:01 PM
Subject: RE: [sipx-users] Phones behind Nat/Pat firewall do not work

I have sipXecs 4.0.1 running behind an ASA and phones out anywhere on
the Internet (behind NAT or not).



Turn off the SIP application layer gateway in the ASA and map the
required ports back to the sipX box from the outside interface (UPD
5060, 30000 - 31000).



Mike



From: sipx-users-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:sipx-users-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Emery ville
Sent: Tuesday, June 30, 2009 9:21 PM
To: Tony Graziano
Cc: sipx-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [sipx-users] Phones behind Nat/Pat firewall do not work



Hey Tony,



I am using SIPX ver 4.0.

My server has a static IP address and I do not have a stun server.



I have tested the SIPX server in the private subnet with the phones and
later gave it a public IP address, with which all the phones are able to
register but they cannot make calls.



The firewalls used are cisco ASA 5510, some use NAT and most use PAT.



The phones cannot call each other being behind the NAT or PAT is a stun
server a must? If yes please suggest how I could install a STUN server
on the same box where the SIPX server is installed as the SIPX server is
on public IP address.



Thanks,

Emery









On Tue, Jun 30, 2009 at 2:09 PM, Tony Graziano
<tgraziano@xxxxxxxxxxxxxxxxxx> wrote:

What version of sipx are you using?

Is your server IP statc or using STUN?

Did you remove the subnets in the schema that are not part of your local
network?

Are any of the remote firewalls using an Application Layer Gateway on
the firewall?

Checked by AVG - www.avg.com
Version: 8.5.374 / Virus Database: 270.13.1/2211 - Release Date:
06/30/09 11:37:00



Checked by AVG - www.avg.com
Version: 8.5.374 / Virus Database: 270.13.1/2211 - Release Date:
06/30/09 11:37:00