google
yahoo
bing

Port forwarding SIP. Trixbox GXP 2000 remote extensions

Ok heres what I did and it works.  FYI.  I have this wokring in 2 locations.

network config at location A

phone - sonicwall TZ170 - internet - SBS2003 - Trixbox

SBS doing the NAT on the TB side.  total pain because you can only forward one port at a time. 

 network config at location b

phone - netgear router- internet - some really old crappy dlink airstream router - trixbox

I did upgrade the firmware on the dlink.

 So my main problem was that you can only forward one port at a time with SBS 2003.  So there was no way I was going to attempt to open 10001-11000 as requested by trixbox.

 so on the TB side of the internet I forwarded 5060 TCP/UDP to TB.  I forwarded 10001-10011 UDP/TCP to TB forward 69 UDP to TB if you want to get your config settings.

Edit RTP.conf

rtpstart=10001
rtpend=10011

Edit sip_nat.conf

externip=your static public IP of the LAN TB is on.
localnet=192.168.16.0/255.255.255.0  the subnet of your internal lan
nat=yes
externrefresh=10

TB is done and will work.

 

Let me also say that these are small systems so not having many rtp ports is ok for them.  YMMV.  if your router is easier to work with you may want to open as many as possible.

 

So now on the Phone side.

Set the phone to static IP.  I prefer using dhcp reservations in the router. and leaving the phone set to dhcp.

in the router the phone is connected to

I forwarded 5060 TCP/UDP to the phone.  I forwarded 10001-10011 UDP/TCP to the phone.

Then in the GXP2000 web admin under advanced settings change the local RTP port: to 10001

Set the firmware and config server path to the public IP or hostname of your trixbox so your phone will get its settings.

 If you want the phone in any ring groups you must put them at the top of the list of extensions in the freepbx ringgroups.  Dont ask me why…

I have BLF, the phones ring and everything is great.  Now if I wanted 2 phones at 1 remote location I may have a problem.  then I would use VPN as this SIP nat thing is a total pain.  If I could find a decent IAX hardphone Id get it.
 

 




 

Leave a Reply

You must be logged in to post a comment.