Snapgear 580 - Firewalls

This is a discussion on Snapgear 580 - Firewalls ; I have a snapgear 580. I have a public IP addres coming into the snapgear, and I have the snapgear handing out private ip addresses. The LAN side of the snapgear is hooked up to a switch. I have a ...

+ Reply to Thread
Results 1 to 6 of 6

Thread: Snapgear 580

  1. Snapgear 580

    I have a snapgear 580. I have a public IP addres coming into the
    snapgear, and I have the snapgear handing out private ip addresses.
    The LAN side of the snapgear is hooked up to a switch.

    I have a particular machine on that switch that I want to have a
    public IP address on. So essentially, I am looking for a way to let a
    second IP address through the snapgear.

    I am just trying to find the term for this so that I can research it.

  2. Re: Snapgear 580

    Am Thu, 09 Oct 2008 23:43:55 -0700 schrieb Jerim:


    > I am just trying to find the term for this so that I can research it.


    destination nat, portforwarding ...

  3. Re: Snapgear 580

    On Oct 10, 1:49*am, Burkhard Ott wrote:
    > Am Thu, 09 Oct 2008 23:43:55 -0700 schrieb Jerim:
    >
    > > I am just trying to find the term for this so that I can research it.

    >
    > destination nat, portforwarding ...


    Thanks, that did help. However, I just wanted to double check and make
    sure I have it setup right. We have 4 public IP addresses, let's say
    206.78.155.146 - 206.78.155.149. We have assigned 206.78.155.146 to
    the WAN side of the snapgear. The LAN side hands out 172.16.142.XXX
    addresses. The server in question has a private IP address of
    172.16.142.3. I have Port Forwarding setup as:

    Descriptive Name Incoming Interface Source
    Address Destination Address
    Services To Destination Address To
    Services
    SIP Any
    Any (Port B, 206.78.155.146) tcp/
    sip/5060 172.16.142.3
    Unchanged


    I am trying to connect a SIP phone at home to the Asterisk server on
    the private network at work. As I understand it, I should set my phone
    to attempt to connect to the Asterisk server at 206.78.155.146. The
    way I have it setup up, any traffic on port 5060 should be sent to
    172.16.142.3. I just want to make sure that I have my networking
    concepts correct.

  4. Re: Snapgear 580

    Am Fri, 10 Oct 2008 21:07:21 -0700 schrieb Jerim:



    > Descriptive Name Incoming Interface Source Address
    > Destination Address Services To Destination
    > Address To Services
    > SIP Any
    > Any (Port B, 206.78.155.146) tcp/
    > sip/5060 172.16.142.3
    > Unchanged


    Sorry line wrapping made is impossible to read that.

    > I am trying to connect a SIP phone at home to the Asterisk server on the
    > private network at work. As I understand it, I should set my phone to
    > attempt to connect to the Asterisk server at 206.78.155.146. The way I
    > have it setup up, any traffic on port 5060 should be sent to
    > 172.16.142.3. I just want to make sure that I have my networking
    > concepts correct.


    Yup you're right but you probably need nat=yes in your sip.conf either.
    Unfortunately I haven't much experience with VoIP, you probably need to
    nat some udp ports either.

    cheers

  5. Re: Snapgear 580

    On Oct 11, 1:43*am, Burkhard Ott wrote:
    > Am Fri, 10 Oct 2008 21:07:21 -0700 schrieb Jerim:
    >
    > > Descriptive Name * * *Incoming Interface * * * * * Source Address
    > > * * * * * * * * Destination Address Services * * * * * * To Destination
    > > Address * * * * * * * * *To Services
    > > * * SIP * * * * * * * * * * * * * *Any
    > > Any * * * * * * * * * * * * * * * * *(Port B, 206.78.155.146) * * tcp/
    > > sip/5060 * * * * * *172.16.142.3
    > > Unchanged

    >
    > Sorry line wrapping made is impossible to read that.
    >
    > > I am trying to connect a SIP phone at home to the Asterisk server on the
    > > private network at work. As I understand it, I should set my phone to
    > > attempt to connect to the Asterisk server at 206.78.155.146. The way I
    > > have it setup up, any traffic on port 5060 should be sent to
    > > 172.16.142.3. I just want to make sure that I have my networking
    > > concepts correct.

    >
    > Yup you're right but you probably need nat=yes in your sip.conf either.
    > Unfortunately I haven't much experience with VoIP, you probably need to
    > nat some udp ports either.
    >
    > cheers


    Thank you so much. I just wanted to make sure I had my networking
    concept down. I have never done something like this before. Silly me,
    I was trying to assign a public IP address to the server, but all I
    needed was port forwarding. This is a very interesting concept to me.

  6. Re: Snapgear 580

    On Oct 11, 1:43*am, Burkhard Ott wrote:
    > Am Fri, 10 Oct 2008 21:07:21 -0700 schrieb Jerim:
    >
    > > Descriptive Name * * *Incoming Interface * * * * * Source Address
    > > * * * * * * * * Destination Address Services * * * * * * To Destination
    > > Address * * * * * * * * *To Services
    > > * * SIP * * * * * * * * * * * * * *Any
    > > Any * * * * * * * * * * * * * * * * *(Port B, 206.78.155.146) * * tcp/
    > > sip/5060 * * * * * *172.16.142.3
    > > Unchanged

    >
    > Sorry line wrapping made is impossible to read that.
    >
    > > I am trying to connect a SIP phone at home to the Asterisk server on the
    > > private network at work. As I understand it, I should set my phone to
    > > attempt to connect to the Asterisk server at 206.78.155.146. The way I
    > > have it setup up, any traffic on port 5060 should be sent to
    > > 172.16.142.3. I just want to make sure that I have my networking
    > > concepts correct.

    >
    > Yup you're right but you probably need nat=yes in your sip.conf either.
    > Unfortunately I haven't much experience with VoIP, you probably need to
    > nat some udp ports either.
    >
    > cheers


    I just wanted to let you know that I added a UDP version of the port
    forwarding and I am getting dialtone at home. I still have some things
    to finish up, but you have been a tremendous help. Thank you.

+ Reply to Thread