Home » Forums » Community Edition » Help

Networking two ports

vanhorn
Posts: 2
 Member Since:
2010-02-14
Submitted by vanhorn on Mon, 02/15/2010 - 12:07am.

I've just barely gotten started, still groping around to see the lay of the land. I got an OpenVox A1200P with 3 each FXO and FXS modules so I can start with duplicating the current home setup with the current phones. I installed Trixbox 2.8.0.3 from the newest stable ISO.

I have s private network here (192.168.0.0/24) and a DMZ network (209.166.88.48/28) where a couple of my public servers live. Any IP phones I get should connect directly from the private network to eliminate traffic through the firewall. Obviously, any outbound connections should be, and remote access to voicemail has to be, on the public side. So I put eth0 in at 192.168.0.6 and eth1 at 209.166.88.51.

When I look in the admin console, which so far only is visible on the private address, PBX | Settings shows that there is a second NIC but System | Network doesn't show any information about eth1 at all, only that it exists. I can't even ping the outside address either from the private network or from a remote datacenter. When I run a traceroute to yahoo.com from the trixbox it goes out through the private network before it gets to the cloud.

I think I can badger CentOS into making both NICs active, but can I get trixbox to deal with both ports as appropriate, and if so, how?

Actually, there is what looks like a valid /etc/sysconfig/networking/devices/ifcfg-eth1 file, with the correct address, but it seems to be ignored. When I enter "route add default gw 209.166.88.62" I get "SIOCADDRT: Network is unreachable", something I've never seen before. That tells me that somebody is clamping down on that port.

No, I do not want any routing through the box! I just want both interfaces to be active and used as appropriate. Is this possible, or do I have to do Asterisk from source to get this working?

Van

‹ IVR Not Working can i use trixbox server to work with public ip ? ›


SkykingOH
Posts: 9675
 Member Since:
2007-12-17
You should not connect
Mon, 02/15/2010 - 7:39am

You should not connect trixbox directly to the Internet for security reasons.

You have to take the gateway off the first NIC before you add it to the second.

--

Scott

aka "Skyking"



vanhorn
Posts: 2
 Member Since:
2010-02-14
You should not connect
Mon, 02/15/2010 - 1:08pm

If the trixbox is not connected to the internet, then users can only check their voicemail when they are inside the private network, which rather limits things. If one of us is connected to the private network, we're also able to pick up our phones and check voicemail that way. One of the exciting things about this system is that there is this second way to connect.

Does trixbox actually create the limitation that there can only be one gateway? If so, I'll start over with another system. I am not interested in learning a system that changes the rules of networking.

Van



bubbapcguy
Posts: 3774
 Member Since:
2006-06-02
networking
Mon, 02/15/2010 - 3:26pm

It has nothing to do with trixbox it is just networking.

READ what Scott wrote..You do not put trixbox on the net, you use a firewall and VPN if you wish to allow outside access.
if you place the box on the net without locking it down until it cries, you will be hacked in no time.

You came here to ask "how to do something" take the good advice you are given.
remove the second nic and do it as it should be done.



SkykingOH
Posts: 9675
 Member Since:
2007-12-17
I am also not sure what
Mon, 02/15/2010 - 5:38pm

I am also not sure what "changing the rules of networking" means.

You can only have one default route no matter how many interfaces your may have.

If you add duplicate routes with the identical masks and metrics how would the IP stack pick the correct interface?

If you want access to the user page via the Internet securely you need to proxy webroot/recordings to the public IP. Your other option is the VPN I suggested earlier.

This is not a trixbox issue, no phone system Open Source or otherwise is designed to be directly connected to the Internet.

--

Scott

aka "Skyking"



Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.