RE: Direct VOIP between two extensions (as opposed to via a proxy) |
|
Ahhh, welcome to the holy grail of NAT traversal with SIP Re-Invites, which are definitely supported by PBXes.
• Inquire whether your Linux firewalls support a SIP ALG (Application Layer Gateway), provided the WAN side of your firewalls is on a Public IP without NAT.
• If they don't, consider placing your ATAs in the DMZ of each router, provided the WAN side of your firewalls is on a Public IP without NAT.
• If the above option is not a valid course of action, port forward the UDP ports 16384 through 16482, towards the Private IPs of your ATAs.
In the first two cases, disable the STUN service, since it will conflict with the SIP ALG, while it should not be needed in the DMZ case.
|