andrewgroup Posted April 6, 2012 Report Share Posted April 6, 2012 We have recently installed our first Soho for a client. To keep expenses low for our clients were are now wanting to support "single" static IP addresses and are putting he Soho behind firewalls. I'd like to propose the following example for discussions... 1. The Local LAN uses the following IP scheme 192.168.100.X (we've chosen this, since many remote phones may be on the common 192.168.1.0, 0.0 network and that might light result in issues. (It kills ipsec VPNs) and assume errors The Firewall is providing all DHCP Services and can also Provide DNS services for specific domains or simply forwards requests to ISP DNS (IE this can be used to create FQDN for phones internally like pbx.fqdndomain.com to point to 192.168.100.99 for the PBX internally while remote phones will see the pbx.fqdndomain.com as the real single static IP address.. The PBX is on 192.168.100.99 The Public IP address is 126.96.36.199 (example) The SIP carrier uses RTP port ranges 10000-30000 The PBX and the local Phones are working fine We like Zyxel Firewalls, but others support SIP too, but we disable SIP ALG.... The problems we are having are one way audio We've followed many tips and wiki posts, but we have no proven solution... SIP replacements, and Routes appear to kill the local phones or the remote phones.... I'd sure be willing to donate whatever time or equipment is needed to come up with a proven Single Static IP address with a Firewall of choice, that reliably supports LAN and WAN phones.... My guess is this first failure is going to cost us the client, the time and the money spent to date, and having the client now request multiple IP addresses from the ISP is off the table... Argg... and all comments or suggestions are welcome... Thanks... Quote Link to comment Share on other sites More sharing options...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.