FYI, I have probably 10 Fortinet units with multiple SIP phones behind
each and all of the phones work flawlessly. As long as the Fortinet is
ver 3.0 or newer, it does NAT so that you don't need to have nat=yes on
*. No pinholes or static nat or anything, it just works.
As a side note, I probably have 20+ Cisco PIX's with the same setup and
they work flawlessly too. I've seen a lot of people saying fixup sip
breaks phones, but not that I have seen. I just let the PIX do nat and
it works fine.
Carlos Chavez wrote:
I have a customer with a Fortinet Firewall that is having stability
issues with Asterisk and SIP endpoints (PAP2T) outside his network.
The first issue I see is that Asterisk sees all phones as the IP
address of the Fortinet. Since the parameter localnet defines the
local network and that address falls in that range, how will Asterisk
treat the endpoints? I have nat=yes for all phones and
canreinvite=no as well. The externip parameter is set to the
outside public IP address. Still we have calls with one way audio.
This is the first setup with a firewall that rewrites the IP address of
the endpoint so I do not know how that is affecting the packet flow. On
my other servers I can always see the public IP of the endpoint.
___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
