NAT Router Recommendation For Large no of IP Phones Behind the Router
Hi All: Currently I use pfSense for NAT implementations. But I found there are few bugs in the firmware cause Presence not working reliably. What are best routers out there with good support for SIP. I am looking for a NAT router that support 20-30 phones . Any good recommendations? Thanks Lloyd
The best router is a router which knows nothing about SIP. I'm not kidding. Let SIP provider's server handle NAT-related issues. On Monday 11 June 2012 21:17:35 Lloyd Aloysius wrote:
Hi All:
Currently I use pfSense for NAT implementations. But I found there are few bugs in the firmware cause Presence not working reliably.
What are best routers out there with good support for SIP. I am looking for a NAT router that support 20-30 phones . Any good recommendations?
Thanks Lloyd
On Mon, Jun 11, 2012 at 7:27 PM, Sergey Okhapkin <sos@sokhapkin.dyndns.org> wrote:
The best router is a router which knows nothing about SIP. I'm not kidding. Let SIP provider's server handle NAT-related issues.
I agree. If you monkey with the SIP messages, it makes their job much harder. Gabe
What version of pfsense are you running? ___________________ Mobile Reply On Jun 11, 2012, at 9:24 PM, Lloyd Aloysius <lloyd.aloysius@gmail.com> wrote: Hi All: Currently I use pfSense for NAT implementations. But I found there are few bugs in the firmware cause Presence not working reliably. What are best routers out there with good support for SIP. I am looking for a NAT router that support 20-30 phones . Any good recommendations? Thanks Lloyd _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com Join Us At ClueCon - Aug 7-9, 2012 FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
I looked for a year to find something with no NAT problems, dual WAN, and auto fallback with load/balancing without causing FS any hiccups. I highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read some people hate it) but it has been bullet proof. And the best part is there is practically nothing to tell FS about! And when one WAN (DSL) goes down the SIP traffic goes out the other one, even switches back automatically! Pair this up with FS and you'll never look back. Hope this helps. Mario G On Jun 11, 2012, at 6:17 PM, Lloyd Aloysius wrote:
Hi All:
Currently I use pfSense for NAT implementations. But I found there are few bugs in the firmware cause Presence not working reliably.
What are best routers out there with good support for SIP. I am looking for a NAT router that support 20-30 phones . Any good recommendations?
Thanks Lloyd _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On 12-06-12 18:20, Mario G wrote:
I looked for a year to find something with no NAT problems, dual WAN, and auto fallback with load/balancing without causing FS any hiccups. I highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read some people hate it) but it has been bullet proof. And the best part is there is practically nothing to tell FS about! And when one WAN (DSL) goes down the SIP traffic goes out the other one, even switches back automatically! Pair this up with FS and you'll never look back. Hope this helps.
Thanks for the info. Have you tried any Draytek Vigor routers like the 2920? I have no experience with them but was told they work fine in dual WAN setups. Regards, Patrick
I try with the pfsense 2.0. Specially BLF causing lots of problems. ==== In the past .. I try the following 1. Linksys WRT54GL + Tomato ... Good for a small office < 5 Extension 2. Monowall with PC Engine Alix Does any one test with a Cisco ASA 5505? On Tue, Jun 12, 2012 at 1:03 PM, Patrick Lists < freeswitch-list@puzzled.xs4all.nl> wrote:
On 12-06-12 18:20, Mario G wrote:
I looked for a year to find something with no NAT problems, dual WAN, and auto fallback with load/balancing without causing FS any hiccups. I highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read some people hate it) but it has been bullet proof. And the best part is there is practically nothing to tell FS about! And when one WAN (DSL) goes down the SIP traffic goes out the other one, even switches back automatically! Pair this up with FS and you'll never look back. Hope this helps.
Thanks for the info. Have you tried any Draytek Vigor routers like the 2920? I have no experience with them but was told they work fine in dual WAN setups.
Regards, Patrick
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
A little late but important to say: When I had the Linksys routers my FS had constant attempts from around the world, mostly China to break into it. I used WireShark to see the attempts, the Linksys could not keep the out.. Since the Zyxel USG100 it has stopped. It has an outstanding firewall and the object oriented rules really helps with SIP. Whatever you select, keep security in mind. On Jun 12, 2012, at 12:23 PM, Lloyd Aloysius wrote:
I try with the pfsense 2.0. Specially BLF causing lots of problems.
====
In the past .. I try the following
1. Linksys WRT54GL + Tomato ... Good for a small office < 5 Extension 2. Monowall with PC Engine Alix
Does any one test with a Cisco ASA 5505?
On Tue, Jun 12, 2012 at 1:03 PM, Patrick Lists <freeswitch-list@puzzled.xs4all.nl> wrote: On 12-06-12 18:20, Mario G wrote:
I looked for a year to find something with no NAT problems, dual WAN, and auto fallback with load/balancing without causing FS any hiccups. I highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read some people hate it) but it has been bullet proof. And the best part is there is practically nothing to tell FS about! And when one WAN (DSL) goes down the SIP traffic goes out the other one, even switches back automatically! Pair this up with FS and you'll never look back. Hope this helps.
Thanks for the info. Have you tried any Draytek Vigor routers like the 2920? I have no experience with them but was told they work fine in dual WAN setups.
Regards, Patrick
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Interesting stuff. What about those of us who run fs on boxes "in the cloud" - we run fail2ban, but perhaps we should also be considering something more sophisticated. Are there any good software stateful firewalls that might suit? On 13 Jun 2012, at 22:07, Mario G wrote:
A little late but important to say: When I had the Linksys routers my FS had constant attempts from around the world, mostly China to break into it. I used WireShark to see the attempts, the Linksys could not keep the out.. Since the Zyxel USG100 it has stopped. It has an outstanding firewall and the object oriented rules really helps with SIP. Whatever you select, keep security in mind.
On Jun 12, 2012, at 12:23 PM, Lloyd Aloysius wrote:
I try with the pfsense 2.0. Specially BLF causing lots of problems.
====
In the past .. I try the following
1. Linksys WRT54GL + Tomato ... Good for a small office < 5 Extension 2. Monowall with PC Engine Alix
Does any one test with a Cisco ASA 5505?
On Tue, Jun 12, 2012 at 1:03 PM, Patrick Lists <freeswitch-list@puzzled.xs4all.nl> wrote: On 12-06-12 18:20, Mario G wrote:
I looked for a year to find something with no NAT problems, dual WAN, and auto fallback with load/balancing without causing FS any hiccups. I highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read some people hate it) but it has been bullet proof. And the best part is there is practically nothing to tell FS about! And when one WAN (DSL) goes down the SIP traffic goes out the other one, even switches back automatically! Pair this up with FS and you'll never look back. Hope this helps.
Thanks for the info. Have you tried any Draytek Vigor routers like the 2920? I have no experience with them but was told they work fine in dual WAN setups.
Regards, Patrick
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You may want to try pfsense 2.0.1 as there were a lot of bug fixes. A client of mine uses a Cosco ASA 5500 Series with my Hosted FreeSWITCH implementation. I'm not sure if there are any BLF issues as they don't use the feature. ___________________ Mobile Reply On Jun 12, 2012, at 3:26 PM, Lloyd Aloysius <lloyd.aloysius@gmail.com> wrote: I try with the pfsense 2.0. Specially BLF causing lots of problems. ==== In the past .. I try the following 1. Linksys WRT54GL + Tomato ... Good for a small office < 5 Extension 2. Monowall with PC Engine Alix Does any one test with a Cisco ASA 5505? On Tue, Jun 12, 2012 at 1:03 PM, Patrick Lists < freeswitch-list@puzzled.xs4all.nl> wrote:
On 12-06-12 18:20, Mario G wrote:
I looked for a year to find something with no NAT problems, dual WAN, and auto fallback with load/balancing without causing FS any hiccups. I highly recommend Zyxel, I use a USG100 with SPI ALG turned ON (I read some people hate it) but it has been bullet proof. And the best part is there is practically nothing to tell FS about! And when one WAN (DSL) goes down the SIP traffic goes out the other one, even switches back automatically! Pair this up with FS and you'll never look back. Hope this helps.
Thanks for the info. Have you tried any Draytek Vigor routers like the 2920? I have no experience with them but was told they work fine in dual WAN setups.
Regards, Patrick
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com Join Us At ClueCon - Aug 7-9, 2012 FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (7)
-
Alexander Lake
-
Chris Ferreira
-
Gabriel Gunderson
-
Lloyd Aloysius
-
Mario G
-
Patrick Lists
-
Sergey Okhapkin