I have done this with a simple PIX site-to-site tunnel and, yes, the CCM / Unity DOES support NATing. If your scenario is more than a handful of remote users, like this site was, I would go with the Proxy setup as Matt described. However, if you have a simple setup and want to go the site-to-site tunnel route, email me offline and I can send you some reference configs of the PIXs' and VOIP GWs.
<br><br>
<div><span class="gmail_quote">On 8/18/06, <b class="gmail_sendername">Manoj Kalpage</b> <<a href="mailto:manoj.kalpage@gmail.com">manoj.kalpage@gmail.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div>
<div lang="EN-US" vlink="purple" link="blue" bgcolor="#ffffff">
<div><font face="Arial" size="2">Hi Matt,</font></div>
<div><font face="Arial" size="2">Thank you for your reply. If I do this with PIX, I guess I have to do natting. I am just wondering whether CCM and Unity does support for natting? Also, what is your recommendation for SCCP Proxy?
</font></div>
<div><font face="Arial" size="2"></font> </div>
<div><font face="Arial" size="2">Best Regards,</font></div></div>
<div><span class="sg">
<div><font face="Arial" size="2">Manoj</font></div></span></div>
<div><span class="e" id="q_10d2175cf2c32923_2">
<div><font face="Arial" size="2"></font> </div>
<blockquote dir="ltr" style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<div style="FONT: 10pt arial">----- Original Message ----- </div>
<div style="BACKGROUND: #e4e4e4; FONT: 10pt arial"><b>From:</b> <a title="Matt.Slaga@us.didata.com" onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:Matt.Slaga@us.didata.com" target="_blank">Matt Slaga (US)
</a> </div>
<div style="FONT: 10pt arial"><b>To:</b> <a title="manoj.kalpage@gmail.com" onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:manoj.kalpage@gmail.com" target="_blank">Manoj Kalpage</a> ; <a title="cisco-voip@puck.nether.net" onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">
cisco-voip@puck.nether.net</a> </div>
<div style="FONT: 10pt arial"><b>Sent:</b> Friday, August 18, 2006 9:15 PM</div>
<div style="FONT: 10pt arial"><b>Subject:</b> RE: [cisco-voip] Callmanager implementation over Internet</div>
<div><br> </div>
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">You can use the SCCP proxy by Metreos to accomplish this and still remain secure. </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">I have implemented a callmanager/unity directly on the internet in the past for a company in your same situation. Their server had more worms in viruses in 1 week than I've seen in my whole life (even with CSA & AV, they were able to take control of the server through a buffer overflow we think and disabled these services). Perhaps CCM5 would be better suited for this purpose, or you could use your pix to only allow the necessary ports.
</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="2">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</span></font></b><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">
cisco-voip-bounces@puck.nether.net</a> [mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>] <b><span style="FONT-WEIGHT: bold">
On Behalf Of </span></b>Manoj Kalpage<br><b><span style="FONT-WEIGHT: bold">Sent:</span></b> Friday, August 18, 2006 4:23 AM<br><b><span style="FONT-WEIGHT: bold">To:</span></b> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net" target="_blank">
cisco-voip@puck.nether.net</a><br><b><span style="FONT-WEIGHT: bold">Subject:</span></b> [cisco-voip] Callmanager implementation over Internet</span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p>
<p style="MARGIN-BOTTOM: 12pt"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Hi All,<br>We have Call Manager and Unity hosted in Data Centre. All our clients have VPN connection to Data Centre. I am using PIX 515 at Data Centre and PIX501 at clients side. All are working perfect except voice quality issue some times. Since this is PBXL hosting service and security is not that much concern, I am wondering I can setup phones to acess CCM and Unity over the internet using gloabl IP address on Cisco IP Phones. Has anyone every implemented CallManager and Unity over internet? Your comment and advice would be greatly appreciated.
<br><br>Best regards,<br>Manoj</span></font></p></div>
<p>
<hr size="1">
<p></p><br>
<p><strong><br>Disclaimer:<br><br>This e-mail communication and any attachments may contain<br>confidential and privileged information and is for use by the<br>designated addressee(s) named above only. If you are not the
<br>intended addressee, you are hereby notified that you have received<br>this communication in error and that any use or reproduction of<br>this email or its contents is strictly prohibited and may be<br>unlawful. If you have received this communication in error, please
<br>notify us immediately by replying to this message and deleting it<br>from your computer. Thank you.<br></strong></p>
<p></p></p></blockquote></span></div>
<div></div></div><br>_______________________________________________<br>cisco-voip mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net
</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br><br></blockquote>
</div><br><br clear="all"><br>-- <br>Robert Hugo<br>Senior Voice Network Engineer<br>World Wide Technologies<br>60 Weldon Parkway<br>St. Louis, MO, 63043<br>1-314-409-6527<br>Cell:1-217-520-3261