Michael, Correct, tun0 is treated like a LAN segment, which is not NAT'ed to Asterisk, hence the tun0 subnet needs to be contained in sip.conf "localnet" as the other Michael suggested.
The OpenVPN 'client-to-client' will disable the default client isolation, so multiple OpenVPN clients can talk with each other. Lonnie On Feb 22, 2016, at 7:52 PM, Michael Knill <michael.kn...@ipcsolutions.com.au> wrote: > Hi thanks Michael > > So is the tun0 interface actually being NAT’ed? I didn’t think so as its in > the routing table as directly connected? > > PS I can access the remote phone no problems. I thought client-to-client was > to access networks on the client side? > > Regards > Michael Knill > > > > > On 22 Feb 2016, at 10:22 PM, Michael Keuter <li...@mksolutions.info> wrote: > > > Am 22.02.2016 um 12:07 schrieb Michael Knill > <michael.kn...@ipcsolutions.com.au>: > >> Hi all >> >> I am using Yealink phones with Open VPN to Astlinux which I have mentioned a >> few times as way cool. >> >> One of the problems I am having is that unless I set directmedia=no, I don’t >> get RTP between a remote and local extension. directmedia=yes works fine. >> Note that the local extension is not on a directly connected subnet e.g. I >> needed to set up routing on Astlinux. > > One important point is to add the OpenVPN virtual network as "localnet" in > the NAT settings of sip.conf. And I always use "directmedia=no". > >> I am pushing the local route (route 172.30.29.0 255.255.255.0) and I have >> been told that the local phone VLAN should be able to route to my Open VPN >> subnet (172.30.253.0/24) although I have not been able to confirm. > > You could add "client-to-client" to the OpenVPN server "Raw commands" and > restart OpenVPN. > Then you should have access via your OpenVPN connection to the remote Yealink > phone. > >> So obviously this is a routing problem but I don’t quite understand what the >> firewall does from a tun0 to eth1 routed interface e.g. reinvited and not >> bridged to Asterisk. >> >> Any experience or ideas anyone? >> >> Regards >> Michael Knill > > Michael > > http://www.mksolutions.info > > > > > ------------------------------------------------------------------------------ > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 > _______________________________________________ > Astlinux-users mailing list > Astlinux-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to > pay...@krisk.org. > > > ------------------------------------------------------------------------------ > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 > _______________________________________________ > Astlinux-users mailing list > Astlinux-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to > pay...@krisk.org. > > ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.
