Well, he said he tested behind his ASA and it didn't work... the reason it didn't is because the SIP ALG is on by default in the ASA.
With the sipX box running outside the firewall there is no need for the SBC on the sipX box. Point your phones at stun01.sipphone.com for a stun server and it should work. If it were me, I'd prefer to have my sipX box behind the firewall. Mike -----Original Message----- From: Tony Graziano [mailto:tgrazi...@myitdepartment.net] Sent: Tuesday, June 30, 2009 9:31 PM To: Picher, Michael; emeryvilleberk...@gmail.com Cc: sipx-users@list.sipfoundry.org Subject: Re: [sipx-users] Phones behind Nat/Pat firewall do not work His server has a public ip address. -----Original Message----- From: "Picher, Michael" <mpic...@cmctechgroup.com> To: Tony Graziano <tgrazi...@myitdepartment.net> To: Emery ville <emeryvilleberk...@gmail.com> Cc: <sipx-users@list.sipfoundry.org> Sent: 6/30/2009 9:27:01 PM Subject: RE: [sipx-users] Phones behind Nat/Pat firewall do not work I have sipXecs 4.0.1 running behind an ASA and phones out anywhere on the Internet (behind NAT or not). Turn off the SIP application layer gateway in the ASA and map the required ports back to the sipX box from the outside interface (UPD 5060, 30000 - 31000). Mike From: sipx-users-boun...@list.sipfoundry.org [mailto:sipx-users-boun...@list.sipfoundry.org] On Behalf Of Emery ville Sent: Tuesday, June 30, 2009 9:21 PM To: Tony Graziano Cc: sipx-users@list.sipfoundry.org Subject: Re: [sipx-users] Phones behind Nat/Pat firewall do not work Hey Tony, I am using SIPX ver 4.0. My server has a static IP address and I do not have a stun server. I have tested the SIPX server in the private subnet with the phones and later gave it a public IP address, with which all the phones are able to register but they cannot make calls. The firewalls used are cisco ASA 5510, some use NAT and most use PAT. The phones cannot call each other being behind the NAT or PAT is a stun server a must? If yes please suggest how I could install a STUN server on the same box where the SIPX server is installed as the SIPX server is on public IP address. Thanks, Emery On Tue, Jun 30, 2009 at 2:09 PM, Tony Graziano <tgrazi...@myitdepartment.net> wrote: What version of sipx are you using? Is your server IP statc or using STUN? Did you remove the subnets in the schema that are not part of your local network? Are any of the remote firewalls using an Application Layer Gateway on the firewall? Checked by AVG - www.avg.com Version: 8.5.374 / Virus Database: 270.13.1/2211 - Release Date: 06/30/09 11:37:00 Checked by AVG - www.avg.com Version: 8.5.374 / Virus Database: 270.13.1/2211 - Release Date: 06/30/09 11:37:00 _______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
