QUESTION VPN/SIP/NAT question

[AndyInNYC]

I have a much longer/detailed post below on my phone/VPN woes.

A simple question:

I have my VPN IP entered in freepbx sip settings as 'local' : 10.11.12.2
My phones connect over VPN (Yealink T46G) and get a 10.11.12.x IP address and the 'V' shows on the Yealink.

In Freepbx -> Extensions, should I have NAT = NO since these 'should' be 'local' and not remote?

That might fix my problem, but I don't want to start randomly making changes and annoy the users (must not annoy the big furry animals!).

The error I'm getting is the typical 30 second cutoff in a phone call; the server is getting/using the public IP of the phone's location after connecting via VPN with the 10.11.12.x IP. The PBX shouildn't know the public IP the phone is on.

Thanks.

 

[billsimon]

The NAT setting should not matter if you have the local nets defined correctly. If Asterisk sees the phones as being inside the NAT, it does not do any manipulation.

It sounds like the problem is with the phone. Is the phone set to use STUN or some other NAT mechanism? Do you have the phone configured to connect to the external IP of the PBX by mistake? Make sure it points to the 10.x address of the PBX and disable STUN and any other NAT traversal settings you find on the phone.

 

[AndyInNYC]

Bill, thanks for your thoughts - this one has me puzzled.

The phone's setup is pretty simple.

NAT and STUN are disabled
SERVER IP is set to 10.11.12.1 port 5060

The phone connects and shows being connected via VPN. It just times out at 30 seconds or less on (presumably) a NAT error (talk talk disconnect). The PBX shows 10.11.12.38 as the connected IP in 'sip show peers'.

All of the detail is in my post: "Problem with External Phone on VPN" -
http://pbxinaflash.com/community/index.php?threads/problem-with-external-phone-on-vpn.15616/

I was just hoping (praying) for a simple solution.


Andrew