[cisco-voip] ATA behind a firewall

[Diego Costa]

Thanks for your response Jared, I agree with you the best option it's public
ips to the gateways, the another option (router with IOS 12.2(8)T10, isn't
100% applicable to our services, because not all the custumers has cisco
routers or one of the list that you send me. For this reason I'm thinking in
a STUN server or another application/device that fix this limitation.


Diego.


-----Mensaje original-----
De: Jared Mauch [mailto:jared at puck.nether.net]
Enviado el: Lunes, 29 de Diciembre de 2003 05:38 p.m.
Para: Diego Costa
CC: Cisco-Voip
Asunto: Re: [cisco-voip] ATA behind a firewall


	If you are using cisco IOS 12.2(8)T10 for your NAT, it will
perform this function for you, without the need for STUN.

	I've found this a quite valuable solution to the SIP/NAT
problem in our environment.

	Some of the "home" routers don't work correctly with SIP.  For
a non-scientific list of routers that work, you might want to check here:
http://sipphone.com/routers/

	My biggest suggestion to people when we set up new IP phones
is to avoid nat/firewall/packet filtering as much as possible.  It creates
unecessary headaches using it.

	- Jared

On Mon, Dec 29, 2003 at 05:17:38PM -0300, Diego Costa wrote:
> Hello guys,
>
>     I want to try cisco ATA behind a NAT, I can use SIP and H323 also,
I've
> read some about STUN but in the documentation of the STUN servers that I
> review, said that they don't work with Cisco ATA's.
>
>
> The scenario would be:
>
>  ------------                     --------------                        --
--
> ---
> | Gatekeeper |----Public IP's----| NAT FIREWALL |----Private IP's----> |
> ATA-1 |
>  ------------                     --------------                        --
--
> ---
>
> I would appreciate any help or suggestion.
>
> Thanks
> Diego.
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip

--
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.