SIP behind firewalls (SchoolsBroadband with Avaya PBX and Gamma)

[Blue_Cookeh]

Hi Guys,

 

Has anyone had any luck getting SIP trunks working behind firewalls?

 

I've got a Gamma trunk I'm trying to setup on our Avaya IPO but can't for the life of me get the trunks to come up. I'm trying to get a connection out from our Avaya PBX through SchoolsBroadband/TalkStraight. I have told Gamma what our authenticating IP is.

 

I know they're compatible since I got them working on our publicly routed connection, but I cant use that for day to day use at the moment.

 

What ports/settings did you guys use?

 

Cheers

[jamesfed]

Typically you would use a session border controller between your internet connection and an IP PBX - something like the Audiocodes Mediant 1000 E-SBC being a good choice for a medium sized deployment.

 

It pretty much acts as a firewall for phone systems allowing only the ports you define (5060 for SIP Control Traffic and high range UDP for the Real Time Audio).

 

This way you have....

 

Your Internet Connection - DMZ Switch - SBC - IP PBX - VoIP Phones/Softclients

..........................................................- Firewall - PCs/Servers

[FN-GM]

Has anyone had any luck getting SIP trunks working behind firewalls?

 

Yep, at a few sites with all different firewalls.

 

 

I've got a Gamma trunk I'm trying to setup on our Avaya IPO but can't for the life of me get the trunks to come up. I'm trying to get a connection out from our Avaya PBX through SchoolsBroadband/TalkStraight. I have told Gamma what our authenticating IP is.

 

I know they're compatible since I got them working on our publicly routed connection, but I cant use that for day to day use at the moment.

 

What ports/settings did you guys use?

 

Cheers

 

The port will UDP 5060 with a large range of other ports that Gamma will/can tell you. Have you configured an external IP and port forwarded this to your PBX? You will also need to create an outbound NAT rule so the traffic coming from the PBX matches this IP. You then use this IP with Gamma. You should setup a firewall to allow allow traffic comming from Gamma.

Edited August 10, 2016 by FN-GM

[IrritableTech]

Hi Guys,

 

Has anyone had any luck getting SIP trunks working behind firewalls?

 

I've got a Gamma trunk I'm trying to setup on our Avaya IPO but can't for the life of me get the trunks to come up. I'm trying to get a connection out from our Avaya PBX through SchoolsBroadband/TalkStraight. I have told Gamma what our authenticating IP is.

 

I know they're compatible since I got them working on our publicly routed connection, but I cant use that for day to day use at the moment.

 

What ports/settings did you guys use?

 

Cheers

 

Have you talked with Schools Broadband support? They have used gamma for some of their telecoms in the past so I am sure they'd be able to get it up and running.

[Blue_Cookeh]

Have you talked with Schools Broadband support? They have used gamma for some of their telecoms in the past so I am sure they'd be able to get it up and running.

 

I am at the moment, I just got them to run a log against the firewall rules for an hour...

 

but I've just managed to find a way to ping from our Avaya PBX and it doesn't look like it can talk to the SB router (even though all our other VLANs can), so I may have just found a config problem.

 

Will update with more info when I work it all out

[Blue_Cookeh]

Just to update... it turned out SB made a config error on their router and it wasn't routing our entire range. They expanded that and now it's all working.