We help IT Professionals succeed at work.

Asterisk 1.6 and VLAN configuration

1,632 Views
Last Modified: 2013-12-21
Hello,

I have an issue with an Asterisk 1.6 box.  I am trying to run multiple companies off of this one asterisk box and am trying to figure out the best method of accomplishing this.

The goal is to have 3 different companies be protected for security reasons.

If I were to create multiple VLANs for each company, how would I configure Asterisk to use separate VLAN for each company?  Would it work if the Asterisk box had several NICs in it each corresponding to the separate VLAN?  Is this even possible in Asterisk 1.6?  

If separate VLANs are not possible, would putting them in their own context be adequate in terms of security?

Thanks for your help.
Comment
Watch Question

Why would you need to use a vlan?  We have hundereds of users on asterisk boxes all with different contexts fine. Remember it's up to you where any call from an extension goes through the dial plan.

Author

Commented:
Perfectpc,  thanks for the quick response.  I was just exploring options to see if there was anything better.
Ron MalmsteadInformation Services Manager
CERTIFIED EXPERT

Commented:
You don't have to have vlans to keep them seperate as perfectpc pointed out.
But, that is more for functionality rather than security though.

From a security standpoint you could use vlans to segregate traffic.
Or,
You could also literally use seperate networks/NIC's on the Asterisk server so that each companies traffic never converges on the same link/switch.

Depending on how this is all interconnected, determines the best answer for keeping it secure and seperate between companies.

If you could provide more details...for example... is all this traffic coming in over a public IP address ??  Same building same network ?  Same building seperate networks ?

Author

Commented:
Hi xuserx2000,

We have a PRI coming into the asterisk box.  From there, we have 3 separate companies that I would like to segment.  All are connected to the same backbone switch and we have VLAN for the voice network.

I would like to ensure that nothing can come across from one voice network to another.  I was thinking along the lines of multiple NICs with each NIC being associated with a separate VLAN.  Then those NICs will be plugged into one backbone switch.  If they are connected to the same backbone switch but on different VLANs, would this defeat the purpose of the VLAN separation?

If you know of a better way, I would appreciate your input.
Information Services Manager
CERTIFIED EXPERT
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Ron MalmsteadInformation Services Manager
CERTIFIED EXPERT

Commented:
""We have a PRI ""

It's not really relevant to the question, but is that enough lines for 3 companies ?

Author

Commented:
xuserx2000,

Thanks for the information.  We actually have 3 PRIs coming in but just generalized it.

Thanks again.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.