Some questions regarding IPs and gateway
Hello all, I'm a asterisk user, and would like to try FS now. I studied already the documentation. However, I still got some problems and questions, any help would be greatly appreciated. 1.) I've got a server with a IP reachable from the open, evil internet. I would like to disable this IP for FreeSWITCH, so that it's not possible to contact FreeSWITCH from there. Do I have to change the routing table of the operating system for this, or is it possible to exclude this ip in FS? 2.) I've got SIP trunk trough a german provider without registration. Authentication is based on IPs in a MPLS-net. So I set my IP in this net as the "external ip" in vars.xml After this, I setup the SIP trunk as a gateway sip-profiles/external.xml using the IP of the voice-switch of my provider as the proxy value and setting register to false. I think I'm still missing something, because sofia_gateway_data on the CLI is telling me "-ERR Parameter missing". I searched for this problem already, but found no solution. 3.) I would like to disable NAT completely, because I think I don't need this (and never used this in Asterisk). Actually there is no NAT involved in my setup. I achieved this using -nonat at startup. But I'm wondering, if there isn't a parameter to disable it by default. 4.) I've got another private (192.168.x.x) net connected to my server. All my phones are in there. So it set the internal ip in sip-profiles/internal to this. Is this correct? Thanks and Greetings from Berlin, Georg
Hi all, I solved 2., 3. and 4. by myself, just 1. is remaining... :) Georg
Its already late...I solved 2. and 4. by myself, 1. and 2. remain open... Cheers, Georg
Georg, Welcome to FreeSWITCH! You've been busy. I have a question and a comment. On #1 - is that IP address for a NIC on the FreeSWITCH server itself or do you have a firewall and have FreeSWITCH sitting behind it? I think if you give us the specific details about your network layout that it would help us help you. For #3 - the -nonat argument is correct for disabling FreeSWITCH's "autonat" stuff. Also, the SIP profiles have NAT settings in them that can be adjusted. There are two flavors of NAT settings: those for when FreeSWITCH itself is behind NAT and those for when the clients connecting to FreeSWITCH are behind NAT. If you want an example of a "plain" SIP profile then look at conf/sip_profiles/external.xml - it's pretty basic and assumes that FreeSWITCH itself is not behind NAT. -MC On Thu, Dec 22, 2011 at 3:32 AM, <georg@riseup.net> wrote:
Its already late...I solved 2. and 4. by myself, 1. and 2. remain open...
Oh god...this is also not correct. So up until now, I found no solution to 1. and 3.
Georg
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hello, sorry for all the confusion I did:
On #1 - is that IP address for a NIC on the FreeSWITCH server itself or do you have a firewall and have FreeSWITCH sitting behind it? I think if you give us the specific details about your network layout that it would help us help you.
Its a IP associated to one nic of the server. No firewall involved. I've got five nics, with five nets associated: - eth0 -> 192.168.0.X [using this for cluster-communication] - eth1 -> 192.168.2.X [using this for cluster-communication] - eth2 -> static ip, rechable from the internet - eth3 -> 192.168.1.X [using this for the phones] - eth4 -> private MPLS net to my provider, using this for the SIP trunk I would like exclude eth0/eth1/eth2 from the configs. I found the acl.conf where I'm able to configure netmasks and stuff like this. I will try this, hope this is correct. Also I will bind FS to 192.168.1.X trough the local ip setting in vars.xml. Comments?
For #3 - the -nonat argument is correct for disabling FreeSWITCH's "autonat" stuff. Also, the SIP profiles have NAT settings in them that can be adjusted. There are two flavors of NAT settings: those for when FreeSWITCH itself is behind NAT and those for when the clients connecting to FreeSWITCH are behind NAT. If you want an example of a "plain" SIP profile then look at conf/sip_profiles/external.xml - it's pretty basic and assumes that FreeSWITCH itself is not behind NAT.
Allright. Thanks! Georg
On Thu, Dec 22, 2011 at 12:48 PM, <georg@riseup.net> wrote:
Hello,
sorry for all the confusion I did:
On #1 - is that IP address for a NIC on the FreeSWITCH server itself or do you have a firewall and have FreeSWITCH sitting behind it? I think if you give us the specific details about your network layout that it would help us help you.
Its a IP associated to one nic of the server. No firewall involved. I've got five nics, with five nets associated:
- eth0 -> 192.168.0.X [using this for cluster-communication] - eth1 -> 192.168.2.X [using this for cluster-communication] - eth2 -> static ip, rechable from the internet - eth3 -> 192.168.1.X [using this for the phones] - eth4 -> private MPLS net to my provider, using this for the SIP trunk
I would like exclude eth0/eth1/eth2 from the configs. I found the acl.conf where I'm able to configure netmasks and stuff like this. I will try this, hope this is correct. Also I will bind FS to 192.168.1.X trough the local ip setting in vars.xml. Comments?
You want to set the IP address in the SIP profile. Remember, FreeSWITCH can use multiple IP addresses and multiple ports, so it's not like Asterisk at all in that respect. You control which IP/Port each SIP profile uses. If you tell the SIP profile explicitly to use a specific IP address then that's what it will use and will ignore the other NICs. Note: You can also tell mod_event_socket to listen on a specific IP/Port that is different than what your SIP profiles are listening on. -MC
For #3 - the -nonat argument is correct for disabling FreeSWITCH's "autonat" stuff. Also, the SIP profiles have NAT settings in them that can be adjusted. There are two flavors of NAT settings: those for when FreeSWITCH itself is behind NAT and those for when the clients connecting to FreeSWITCH are behind NAT. If you want an example of a "plain" SIP profile then look at conf/sip_profiles/external.xml - it's pretty basic and assumes that FreeSWITCH itself is not behind NAT.
Allright.
Thanks!
Georg
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
You want to set the IP address in the SIP profile. Remember, FreeSWITCH can use multiple IP addresses and multiple ports, so it's not like Asterisk at all in that respect. You control which IP/Port each SIP profile uses. If you tell the SIP profile explicitly to use a specific IP address then that's what it will use and will ignore the other NICs.
I achieved this now trough another way, see my other mail for this. I this "a no-go"? I already set the ips in my internal and my external profile, however, FS was still binding itself to the wan-ip (which is the way it normally works, if I'm right?). My plan was to change this and exclude especially the wan-ip. Georg
The "domain" method you used is actually a good way to go if you're always wanting the same IP for all network comms. -MC On Thu, Dec 22, 2011 at 3:19 PM, <georg@riseup.net> wrote:
You want to set the IP address in the SIP profile. Remember, FreeSWITCH can use multiple IP addresses and multiple ports, so it's not like Asterisk at all in that respect. You control which IP/Port each SIP profile uses. If you tell the SIP profile explicitly to use a specific IP address then that's what it will use and will ignore the other NICs.
I achieved this now trough another way, see my other mail for this. I this "a no-go"?
I already set the ips in my internal and my external profile, however, FS was still binding itself to the wan-ip (which is the way it normally works, if I'm right?). My plan was to change this and exclude especially the wan-ip.
Georg
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
The "domain" method you used is actually a good way to go if you're always wanting the same IP for all network comms.
Allright, thanks. Its just my second days with FS, but I'm already impressed. I like the possibilities of the ACLs/defining IPs/which IPs should FS listen to a lot. For all what I know, this is not possible in Asterisk (at least not in this manner), which is a bit stupid (and insecure?) in my eyes. Cheers, Georg
Its a IP associated to one nic of the server. No firewall involved. I've got five nics, with five nets associated:
- eth0 -> 192.168.0.X [using this for cluster-communication] - eth1 -> 192.168.2.X [using this for cluster-communication] - eth2 -> static ip, rechable from the internet - eth3 -> 192.168.1.X [using this for the phones] - eth4 -> private MPLS net to my provider, using this for the SIP trunk
I would like exclude eth0/eth1/eth2 from the configs. I found the acl.conf where I'm able to configure netmasks and stuff like this. I will try this, hope this is correct. Also I will bind FS to 192.168.1.X trough the local ip setting in vars.xml. Comments?
I used <X-PRE-PROCESS cmd="set" data="domain=192.168.1.X"/> in vars.xml to achieve this. Thanks for all the hints, Georg
" .I solved 2. and 4. by myself, 1. and 2. remain open... " You have last try :) 2011/12/21 <georg@riseup.net>
Its already late...I solved 2. and 4. by myself, 1. and 2. remain open...
Cheers, Georg
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Regarding #1: Do you have 2 network cards? One has global IP (evil internet) and one has local IP (the one which you want to use for FreeSWITCH) ? 2011/12/22 Vitalie Colosov <vetali100@gmail.com>
" .I solved 2. and 4. by myself, 1. and 2. remain open... "
You have last try :)
2011/12/21 <georg@riseup.net>
Its already late...I solved 2. and 4. by myself, 1. and 2. remain open...
Cheers, Georg
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
georg＠riseup.net
-
Michael Collins
-
Vitalie Colosov