Is it possible to run SER SIP server behind a NAT? If so, what type of configuration changes am i looking at? My current scenario is as follows.
Internet <-----> Pix (12.x.x.x translates to 10.x.x.x) <----> SIP Server
Requests to and from the internet have a static NAT translation rule in a PIX firewall. Traffic flows from the outside global IP to an inside NAT'ed IP (non-routable) and vice versa. The SIP server's interface is configured with a non-routable IP addresss (10.x.x.x) for example. My problem is related to the message header and the ACK has a record route with the 10.x.x.x in it. Please help.
Alan wrote:
Is it possible to run SER SIP server behind a NAT? If so, what type of configuration changes am i looking at? My current scenario is as follows.
Internet <-----> Pix (12.x.x.x translates to 10.x.x.x) <----> SIP Server
We have been running ser 0.8.99-dev19 (sparc/openbsd) for more than a year on NAT; our solution required ser to run on the NAT border router so that it could service the public net interfaces and the internal NAT'ed interfaces. We use rtpproxy on the same box. I have not actively watched the lists for any developments involving running it on a host only on a private ip space. I don't know of a ser port to run on the Pix. All external UAs so far have been on public ip addresses; we haven't yet dealt with the issue of external UAs behind NAT (perhaps a STUN solution would work, or a VPN where feasible).
Michael Grigoni Cybertheque Museum
-
Alan -
Michael Grigoni