Home » Forums » Community Edition » Help

Good Old Questions

jstraten
Posts: 165
 Member Since:
2006-08-16
Submitted by jstraten on Mon, 08/11/2008 - 3:42pm.

My home installation is finally in a working condition, but I noticed that some answers are not clearly answered in the forum and so I am hoping to get some working advise. Here we go:

1. Shoud NAT be "yes" or "no" for the following network layout?

DSL Modem (Bridge Mode to pass through external static IP)
|
Smoothwall (forwards all traffic for external static IP to internal IP [e.g. 192.168.4.10])
|
Trixbox (with two FXS)

In addition I also have two soft phones (SIP) which are normally outside the firewall.

2. Which codecs are built into Asterisk/Trixbox?

3. Should ACPI set to "on" or "off"?

4. If I would run the Trixbox GUI on the outside of my firewall what is a good way to protect it? Should I require client certificates? If so, is it easy to implement those in Trixbox? How can I do that? I am familiar with the process on IIS...

Well, I did do a search on all items above, but I found too many different answers to come to a conclusion.

Thanks,
Jens

‹ HELP TRIXBOX AND NAT issues Dynamic Agents Queues ›

&nbsp

SkykingOH
Posts: 9538
 Member Since:
2007-12-17
You didn't mention if you
Mon, 08/11/2008 - 4:22pm

You didn't mention if you are running any SIP hosts inside our outside the firewall. That would make a difference in the answer.

With the smoothwall use a VPN. Don't even think about exposing port 80 or 443 to the Internet.

--

Scott

aka "Skyking"


&nbsp

jstraten
Posts: 165
 Member Since:
2006-08-16
Ok. I updated my post above.
Mon, 08/11/2008 - 4:49pm

Ok. I updated my post above. Basically, I also have 2-3 soft phones which normally get used outside the firewall.

I guess your answer raises another question: Can I only use soft phones internally OR externally?

Thanks,
Jens


&nbsp

kb9mwr
Posts: 166
 Member Since:
2006-09-09
I set all my extensions to
Mon, 08/11/2008 - 5:22pm

I set all my extensions to NAT=YES.
Your network layout is just like mine, except I don't use smoothwall, just a standard Buffalo router.

ulaw & alaw (g.711), gsm, ilbc speex and other common codecs are all built in
http://www.voip-info.org/wiki/view/Asterisk+codecs

I'd disable ACPI, I never have tested with it enabled.

Setup a VPN like hamachi if you need remote GUI access.

You can use softphones remotely (or ATA's, IP phones, etc). you just need to configure asterisk as a SIP client behind a NAT.


&nbsp

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.