Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Sebastian
On 01/11/2011 02:20 PM, Gilles wrote: Hello I read a whole book on OpenVPN, but still can't figure how to configure the server + client so that the the client connects and sends SIP/RTP data through the tunnel. To get started, I'd rather use a shared key instead of X509 (certificates +

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Gordon Henderson
On Tue, 11 Jan 2011, Gilles wrote: Hello I read a whole book on OpenVPN, but still can't figure how to configure the server + client so that the the client connects and sends SIP/RTP data through the tunnel. To get started, I'd rather use a shared key instead of X509 (certificates + keys).

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Gilles
On Tue, 11 Jan 2011 15:20:39 +0100, Gilles codecompl...@free.fr wrote: By any chance, would someone have a working configuration so I can take a look? Got it working :-) Thanks much guys for the help. For those interested, here's how I did it. Note that the appliance only has the openvpn server,

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Bruce B
In sip_nat.conf you need to specify 10.8.0.1/24 as your localnet and also make sure you have your externip setup as well. Else you will notice one way audio or cut off after 30 seconds. Rest of your work is all good. For security reasons the workstation that creates the keys is not connected to

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Gilles
On Thu, 13 Jan 2011 09:43:26 -0500, Bruce B bruceb...@gmail.com wrote: In sip_nat.conf you need to specify 10.8.0.1/24 as your localnet and also make sure you have your externip setup as well. Else you will notice one way audio or cut off after 30 seconds. I don't have sip_nat.conf, as I don't

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Gilles
On Thu, 13 Jan 2011 15:55:10 +0100, Gilles codecompl...@free.fr wrote: The only issue I notice, is that Asterisk doesn't tell the other end when the local end has hung up, so the other end either remains online or hangs up after 20-30 seconds. Found it: We must add a localnet directive so that

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Bruce B
As I said, your tunnel address should be part of localnet. Otherwise you experience what you did. -Bruce On Thu, Jan 13, 2011 at 10:00 AM, Gilles codecompl...@free.fr wrote: On Thu, 13 Jan 2011 15:55:10 +0100, Gilles codecompl...@free.fr wrote: The only issue I notice, is that Asterisk

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-13 Thread Gilles
On Thu, 13 Jan 2011 10:42:48 -0500, Bruce B bruceb...@gmail.com wrote: As I said, your tunnel address should be part of localnet. Otherwise you experience what you did. Sorry about that. I didn't make long-enough calls for Asterisk to disconnect due to the lack of localnet for the VPN, and didn't

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-12 Thread Gilles
On Tue, 11 Jan 2011 10:02:48 -0500, Mark Deneen mden...@gmail.com wrote: Using the shared secret will only allow a single point to point connection. That is, you have to use certificates if you want more than one client. Thanks for the tip. I was under the impression that the shared key is just

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-12 Thread Gilles
On Tue, 11 Jan 2011 10:23:18 -0500, Bruce B bruceb...@gmail.com wrote: I have OpenVPN and Asterisk working nicely. However, I do use certificates. Though, it shouldn't matter. Can you explain what doesn't work for you? Is the connection not established or is the Asterisk and it's client not

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-12 Thread Bruce B
Your network layout is correct. I am still unclear what is not working for you, but I guess you can't establish a connection yet. In the config file server.conf for the server side you will have parameter verb=3 which you can change to like 9 and see what the error message is upon connect. If

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-12 Thread Mark Deneen
On Wed, Jan 12, 2011 at 12:08 PM, Gilles codecompl...@free.fr wrote: On Tue, 11 Jan 2011 10:02:48 -0500, Mark Deneen mden...@gmail.com wrote: Using the shared secret will only allow a single point to point connection.  That is, you have to use certificates if you want more than one client.

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-12 Thread Hans Witvliet
On Wed, 2011-01-12 at 14:18 -0500, Mark Deneen wrote: Static Key disadvantages * Limited scalability -- one client, one server * Lack of perfect forward secrecy -- key compromise results in total disclosure of previous sessions * Secret key must exist in plaintext form on each VPN peer *

[asterisk-users] OpenVPN + SIP configuration?

2011-01-11 Thread Gilles
Hello I read a whole book on OpenVPN, but still can't figure how to configure the server + client so that the the client connects and sends SIP/RTP data through the tunnel. To get started, I'd rather use a shared key instead of X509 (certificates + keys). The server is running on a uClinux

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-11 Thread Andrew Latham
On Tue, Jan 11, 2011 at 11:20 AM, Gilles codecompl...@free.fr wrote: Hello I read a whole book on OpenVPN, but still can't figure how to configure the server + client so that the the client connects and sends SIP/RTP data through the tunnel. To get started, I'd rather use a shared key

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-11 Thread Mark Deneen
On Tue, Jan 11, 2011 at 9:29 AM, Andrew Latham lath...@gmail.com wrote: On Tue, Jan 11, 2011 at 11:20 AM, Gilles codecompl...@free.fr wrote: Hello I read a whole book on OpenVPN, but still can't figure how to configure the server + client so that the the client connects and sends SIP/RTP

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-11 Thread Bruce B
Hi, I have OpenVPN and Asterisk working nicely. However, I do use certificates. Though, it shouldn't matter. Can you explain what doesn't work for you? Is the connection not established or is the Asterisk and it's client not communicating? -Bruce On Tue, Jan 11, 2011 at 9:20 AM, Gilles

Re: [asterisk-users] OpenVPN + SIP configuration?

2011-01-11 Thread Dale Noll
I read a whole book on OpenVPN, but still can't figure how to configure the server + client so that the the client connects and sends SIP/RTP data through the tunnel. To get started, I'd rather use a shared key instead of X509 (certificates + keys). The server is running on a uClinux appliance,