• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1761
  • Last Modified:

SonicWall TZ100 configuration for asterisk server

I;m trying to configure SonicWall TZ100, which I put between router Thomson TG585 v7 connected to ISP with static IP (port X1 WAN) and my LAN switch (port X0 LAN). LAN also use static IPs for all devices.
On LAN I have Asterisk server which required in router port forwarding to Asterisk:
IAX_REG - TCP/UDP 4569
VPN_ASTERISK - TCP/UDP 1149 (I understand for connecting to second asterisk server in other office)
What exactly I need to configure in TZ100 for it (routing policies, firewall rules, ets)?
If in router configuration something need to be changed?
Detailed instructions/explanations highly appreciated.
0
Lambru
Asked:
Lambru
  • 5
  • 5
  • 4
2 Solutions
 
digitapCommented:
to send the asterisk traffic out the WAN interface from the LAN, you can run the public server wizard. the kb below can outline that.

https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=7027

regarding the VPN, unless you plan to control what hosts have access to the vpn, all traffic is allowed via the VPN connection so there's really nothing you need to do there.

what is asterisk?
0
 
LambruAuthor Commented:
Thank you for the link.
Unfortunately Asterisk it's SIP VoIP server - software PBX, and there is no similar type of server in this wizard.
VPN is also organised somehow from 1 asterisk server to the other for voice trafic only, I even do not know how exactly - I'm new in asterisk and it's not me who did this installation.
Thus I need somehow to configure new appliance (TZ100) in order all this not to stop working.
0
 
digitapCommented:
is IAX_REG your providers voip server?
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LambruAuthor Commented:
It is port forwarding configured now on router, but asterisk do connect to at least 2 different voip providers-both making and accepting calls.
0
 
Cas KristCommented:
With my sonicwall (NSA240) I can run the public server wizard and choose 'other' at 'the 'Server type' field. And i can create a new service with the wizard. But maybe it is easier to create the services before running the wizard (and create a servicegroup).

Maybe it is because I am running SonicOS enhanced, I dont know what a TZ100 is running.
0
 
digitapCommented:
@caskrist :: 100 runs the enhanced OS.

and caskrist is correct. you can create your own service under firewall > services. choose that during the public server wizard.
0
 
LambruAuthor Commented:
OK, let's let alone the wizard - as we do no know exactly if it's suite our case or not. Probably manually step by step will be more reliable.
I did created services IAX_REG and VPN_ASTERISK with the appropriate ports. As in my router was written TCP/UDP, and in SonicOS I can select only or TCP or UDP, I also created IAX_REG_UDP and VPN_ASTERISK_UDP with the same port numbers.
As probably we will need name for the server I also created ASTERISK object with server IP adress.
What to do next?
0
 
digitapCommented:
sure...the first link below is a video tutorial and the second is the step by step of what you ask for.

https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=8368

https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=7712
0
 
Cas KristCommented:
You can create a service group in which you can put multiple custom services (service A tcp and service A Ido, service B tcp and service B udp, all together in 1 servicegroup). This servicegroup you can use in the NAT policies and firewall files).
0
 
Cas KristCommented:
Ido is udp in the post above, and firewall files should be firewall rules ofcourse. I am getting used to my new phone:-)
0
 
LambruAuthor Commented:
Thank you. I created SRV_ASTERISK group with 4 members.
0
 
digitapCommented:
hmm, the steps i gave above do not talk about service groups and i thought they did. sorry.
0
 
Cas KristCommented:
Now you can follow the steps in the videos, or run the wizard.
0
 
Cas KristCommented:
Thanks fot the points. Hope it works now.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 5
  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now