| Author |
Message |
xenophon
New Forum Member


Joined: Nov 27, 2003
Posts: 3
|
Will Vonage work behind an ISP firewall? My cable modem ISP assigns customers a static private ip address, something like 192.168.3.56. There is no way to reach my PC outside the network (say like, if I wanted to reach my ftp server from work, no can do). And I know it's pretty impossible for them to forward ports to me. Heck, if they got 2 Vonage subscribers, they'd be screwed So, assuming no ISP port forwarding, and assuming my ISP gives me an address of 192.168.3.56 on my network settings, would Vonage work? Does the ATA keep a constant live connection to the Vonage servers so when an incoming call comes in, it just sends the packet on, thus the ISP firewall passes it on?
Thanks,
x |
|
|
|
|
 |
dswartz
Vonage Forum Associate


Joined: Nov 16, 2003
Posts: 11
|
the setup on the ATA is designed to work with a DHCP-assigned, NAT'ed private IP. if you have a static IP, you need to assign that to the ATA (there's a way to do this through the handset, but you'll have to check the FAQ for that...) |
|
|
|
|
 |
xenophon
New Forum Member


Joined: Nov 27, 2003
Posts: 3
|
| dswartz wrote: | | the setup on the ATA is designed to work with a DHCP-a**igned, NAT'ed private IP. if you have a static IP, you need to a**ign that to the ATA (there's a way to do this through the handset, but you'll have to check the FAQ for that...) |
Hi,
Well, I won't have to worry about setting the ATA to a static. I'm running a Linksys router that is assigned the static ip, and my router is set to provide DHCP services for all my pc's, including the ATA. Looking at my network, it would get a DHCP ip of 192.168.1.102. I guess there's only one way to find out if it will work with my cable ISP...seeing as they route all traffic via a gateway. I'm assuming they use NAT so I'm confident it should work, I just wanted to know if anyone else out there was in this same situation (ISP puts you behind a firewall/gateway, assigning you a 192.x.x.x ip)
x |
|
|
|
|
 |
dswartz
Vonage Forum Associate


Joined: Nov 16, 2003
Posts: 11
|
this is how they designed the ATA to work... |
|
|
|
|
 |
kheops_78
New Forum Member


Joined: Jun 02, 2005
Posts: 6
|
I have my ATA behind a Checkpoint firewall that also does my routing. I assigned the ATA a rivate IP on my DMZ and opened all outbound access. On the firewall I created a bunch of service (port) redirects for inbound traffic. Not only do I not get any dial tone, and of cours eI have no Voip led on the ATA. The mystery in this whole thing is that the only traffic I see coming from the traffic is DNS (udp 53) traffic. Isn't it supposed to be initating a lot of SIP traffic????
I set everything up in the WAN configuration section: I set the gateway to the DMZ interface and enterd GE's 4.2.2.2 and 4.2.2.3 as DNS servers
Could anyone provide any instight or recommendations? |
|
|
|
|
 |
sajer
Full Forum Member


Joined: Dec 16, 2004
Posts: 59
|
| kheops_78 wrote: | | I assigned the ATA a rivate IP on my DMZ and opened all outbound access. |
I'm confused. If you are connecting your ATA in the DMZ, it should have a public ip address, not a private ip address.
| kheops_78 wrote: | | On the firewall I created a bunch of service (port) redirects for inbound traffic. |
If you are putting your ATA in the DMZ you shouldn't need to do this.
The ATA is going to try to do a DNS lookup of the sip proxy name, followed by a SIP register to the ip addresses in the response. Are you seeing responses to the DNS queries sent by the ATA? It sounds like the DNS queries are failing and you are not getting any further in the registration process as a result. |
|
|
|
|
 |
kheops_78
New Forum Member


Joined: Jun 02, 2005
Posts: 6
|
when I say I put it on the DMZ, I mean ?I isolated it on a segment of my firewall called DMZ (purely arbitrary) this interface and segment have private IPs, the only public IP that I have is on my firewall's WAN interface. You right on the ball with the DNS traffic, I do not see any responses which puzzles me... after every 3 attempts for DNS I see a SIP 5060 packet being broadcasted, but that is it. for the service redirects I created a group object that I use in my NAT (address translation ) section. apart from breaking that down into individual rules for every port, I don't see what I can do please help |
|
|
|
|
 |
kheops_78
New Forum Member


Joined: Jun 02, 2005
Posts: 6
|
hallelujah...almost I was able to get the Voip light and dial tone as well as session initialization... I configured hide nat on my fw (NAT the ATA private IP to the firewall gateway public IP) ... I feel stupid for having forgotten that... However I have no sound! I get dialtone, and am able to dial out, the other endpoint will ring, but once the line is picked up I do not hear a single thing. other oddity the WAN status still indicates 0s all throughout its fields even though I am seeing traffic from the statically assigned IP (and the system status indicates connected to Voip --> why don't I get any sound and why doesn't wan status show the device's config??? |
|
|
|
|
 |
tommy13v
Moderator


Joined: Dec 20, 2004
Posts: 230
Location: upstate NY
|
| kheops_78 wrote: | hallelujah...almost I was able to get the Voip light and dial tone as well as session initialization... I configured hide nat on my fw (NAT the ATA private IP to the firewall gateway public IP) ... I feel stupid for having forgotten that... However I have no sound! I get dialtone, and am able to dial out, the other endpoint will ring, but once the line is picked up I do not hear a single thing. other oddity the WAN status still indicates 0s all throughout its fields even though I am seeing traffic from the statically assigned IP (and the system status indicates connected to Voip --> why don't I get any sound and why doesn't wan status show the device's config??? |
Did you happen to try for the heck of it an any to any rule? I always forget about the hide nat with the checkpoint as well. |
_________________ ISP: Road Runner 5Mb/s down 384k up Linux Firewall --->RT31P2 ---> Asterisk PBX Vonage Custom Since December '04 www.baldwintechsolutions.com Record your Vonage Calls. |
|
|
|
 |
kheops_78
New Forum Member


Joined: Jun 02, 2005
Posts: 6
|
good idea, I will try that. what do you recommend for the inbound service redirects though?? Another disturbing fact is the fact that although things seem to be working, my WAN status still indicates all 0!!! unfortunately checkpoint does not do DHCP for me to try |
|
|
|
|
 |
|
|