Jump to content

WAN & LAN


Vega

Recommended Posts

Windows has a lot of great documentation on how to set up network interfaces. I don't want to repeat that here. However what is important is (like in Linux) that the packets that are being sent to the public Internet are using the public IP address of the PBX. This is like in Linux depending on the routing setup of the PBX. In Windows, you can control that with the metrics on the interface. If the metrics are the same, Windows tends to choose the one with the higher bandwidth. Unfortunately, in many environments the LAN has higher bandwidth that the WAN, in which case you end up with the wrong routing. To verify that the packets to the Internet are using the WAN interface, use the "route print" command.

 

In addition to that, what I have said in the Linux port before also applies to the Windows installation. Be aware about the fact that there are scanners in the Internet who are testing port 5060 for SIP replies. Make your that your passwords are okay by setting the password policy to medium, make sure that you get email (or text) notifications and consider running the service on a different port than 5060. You can actually have the internal service listen on port 5060 and the public IP listen on a different port, with a port setting like this "192.168.4.5:5060 212.213.214.215:8458", which would mean "bind one socket to port 5060 on the IP address 192.168.4.5 and another one on port 8458 on the address 212.213.214.215".

 

Also, if you are running Windows Server on a public IP, make sure that the general rules for securing a Windows server are being applies. However, make sure that the pbxctrl.exe process has the right to communicate with internal and external sources.

Link to comment
Share on other sites

thanks for the feedback

i have setup 1 interface to the voip provider and another interface to the local LAN dhcp.

Set the metric and the trunk gets registered to the voip provider and able to complete outgoing and incoming calls through the voip provider.

Also calls between ip phones in the LAN are ok.

Is this all anything else to be done.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...