[swapan.roy2]

Hi I am new to asterisk.I am trying to configure Asterisk-1.4.9 inside a Firewall protected LAN(Asymmetric NAT) only for internal communication inside the office/LAN,but without any luck so far.My aim is to connect all the users inside my office,who can talk to each other,not outside world for the time being.

I want a very basic setup to connect all the users inside offfice/LAN.Can anyone provide me detailed steps how to configure extensions.conf & sip.conf etc file in firewall scenario.

Also i want to inform that my ASTERISK server and sjphone/SIP clietns are all inside same LAN & my asterisk server has static ip but it doesn't have a public domain name/public IP. Is it necessary to have a public IP for the asterisk server?

Can anyone put some light on
1.What is outbound sip proxy? why it is needed?
2.what is ougoing sip provider & DID?
3.Do i need to install asterisk on a public ip server and keep it outside firewall?
4.What is externip actualy,can i put my asterisk server's static ip address there?
5.If it is not static how can i configure it as static?

[rejil.rajan]

Hi Swapan

When you say that your LAN is firewall enabled. Please could you explain your network infrastructure. All i would like to know is that is your asterisk server and users seperated by a firewall. If they are not as i saw in your post they are in the same LAN, then there is no issues in configuring the system. You do not need an external IP for Asterisk to work. It can work with an internal IP

[swapan.roy2]

Hi Rajan Thanks a lot for your reply..

As you guessed is right,we kept all the 3 systems( 1 asterisk server + 2 sj phone clients) in the same LAN,but we kept all the 3 systems outside firewall and tested it yesterday, it worked...although the sjphone main screen still showing
NAT/Firewall : Asymmetric NAT detected
i think it is just detecting the nat setup in our LAN.
Now one question: if everything (asterisk server + phone clients) are inside a firewall
protected LAN,then also our sjphone display showing this line :NAT/Firewall : Asymmetric NAT detected
Are you sure it works ??? if we are trying to talk only inside LAN

I am using Asterisk-1.4.9.i have attached the sip.conf and extensions.conf file here (which are working), i have a question next.
sip.conf file below:
[general]
bindport =5060 ; Port to bind to
bindaddr = 192.168.1.207;Address to bind to
context = sip;
srvlookup=yes
externip=192.168.1.207 ; internal ip of our asterisk server
localnet=192.168.1.0/255.255.255.0
registerattempts=0
registertimeout=3600; working is 3600
canreinvite=no
nat=no
qualify=yes ;
disallow=all
allow=ulaw
allow=alaw
allow=all



register => mysjphone:mysjphone@192.168.1.207/1000
register => mysjphone1:mysjphone1@192.168.1.207/2000
;register => smita:smita@192.168.1.207/3000


[192.168.1.207]
type=user
host=192.168.1.207


[mysjphone] ;1st phone client
nat=no
type=friend
host=dynamic
username=mysjphone
secret=mysjphone
dtmfmode=rfc2833 ;Choices are inband, rfc2833, or info
context=sip
callgroup=1
pickupgroup=1

[mysjphone1] ; 2nd phone client
nat=no
type=friend
host=dynamic
username=mysjphone1
secret=mysjphone1
dtmfmode=rfc2833 ;Choices are inband, rfc2833, or info
context=sip
callgroup=1
pickupgroup=1


Here is extensions.conf file

[sip]
exten => 1000,1,Dial(SIP/mysjphone,20)
exten => 1000,2,Playback(vm-unknown-caller)
exten => 1000,3,Hangup()

exten => 2000,1,Dial(SIP/mysjphone1,20)
exten => 2000,2,Playback(vm-unknown-caller)
exten => 2000,3,Hangup()

1.now if i want to connect all the 3 systems inside firewall , what changes i have to make in the above files?
2.how can i register to this asterisk server (which is inside office LAN/Firewall) from outside office (e.g home or cyber cafe) and be able to make call to people in office.
In that case do i need a public ip for asterisk server? will the register command register any outside user seperted by firewall if i configure nat =yes,canreinvite=no?

[rejil.rajan]

Hi

I have a similar setup in my test lab, but we have not used SJ phone, we use Xlite. We have not faced this issue.Please can you show me the configuration done in the SJ phone.

One more thing if trying to access the Asterisk server from outside. This server has to be natted with a public IP and preferred to use an IAX client like Idefisk, else you will need a SIP proxy in the external.

[swapan.roy2]

Well i think the most important mention for sjphone setting is :
1.Under sip proxy menu i just set proxy domain=192.168.1.207 bindport:5060 i.e the internal ip and udp port of our asterisk server,i kept all other setting to default like.... proxy for nat=nothing set,stun server
setting kept default and just initialized one username and password and set the audio codec to ulaw.. In the sjphone no client ip address initialized anywhere since it is dynamic(dhcp)..


And to be able to use IAX i have to configure one more asterisk server at the other end and register the outside client to that, then two asterisk server can communicate through iax in....Am i right or wrong???

can u provide me your config files for various scenario, it will help me a lot..