Solved

FreePBX - Connect IP Phone over Internet

Posted on 2014-04-19
5
1,802 Views
Last Modified: 2014-04-21
Hi Experts,

I currently have FreePBX setup and looking to connect an IP phone over the internet via VPN, router to router.

I came across this website here  saying I should setup two FreePBX box and connect via IAX trunks instead. Is this really necessary? Wouldn't VPN be suffice?

Any advice is appreciated.

Many thanks,
Ricky
0
Comment
Question by:RiCzN
  • 2
  • 2
5 Comments
 
LVL 20

Expert Comment

by:José Méndez
ID: 40010501
Hi Ricky, I am glad to see you are getting ambitious!

Hey, I once had  a VPN point to point connection between an Asterisk server and a remote Grandstream GXV3140 with builtint OpenVPN client, however a p2p connection between 2 Ast boxes should be pretty much the same.

I know squat about VPNs, however I went with 2 useful books: Beggining OpenVPN 2.0.9, and OpenVPN 2 Cookbook.

If you are not able to get your hands on them, you may want to try signing up for a 15 day trial in safaribooksonline.com, and youll find them for sure.

Now, I am attaching what I documented at the time to be the steps I went through to understand OpenVPN. I can say that a G.711 calls worked like a charm.

Finally, you probably don't want to stay only with the security that OpenVPN provides, and rather secure Asterisk as well to use TLS for sRTP and secure SIP.

Hope that helps a bit.
OpenVPN.pdf
0
 

Author Comment

by:RiCzN
ID: 40010864
Hi willlywilburwonka, thanks for your input. I don't think I need openVPN in this case as the routers are already providing the vpn tunnel. But I'm sure your setup will come in handy very soon.

What I'm not sure is whether the VPN tunnel is secure enough for an IP phone to connect over the internet. So what you're saying is TLS for sRTP and secure SIP are also required in order to provide sufficient security?
0
 
LVL 20

Assisted Solution

by:José Méndez
José Méndez earned 250 total points
ID: 40011004
As far as securing the communications, yes, sRTP and TLS For SIP. We are not even discussing hardening the Asterisk servers themselves, which is a huge topic of its own =)
0
 
LVL 15

Accepted Solution

by:
Phonebuff earned 250 total points
ID: 40013056
Ricky,

   If you "VPN tunnel" is a good implementation,  does key pair exchanges and encrypts everything over the link that's as good as it can possibly be.  

   The reason for the dual boxes is usually that IAX2 is easier on the network connection than SIP, and more importantly if you have a half dozen phones in each location and they call between themselves you keep the traffic off the VPN.   Also by providing a trunk or two at either end you simplify the issue of "emergency 911" calls.

    ==============
0
 

Author Comment

by:RiCzN
ID: 40013682
Hi Phonebuff, that was the reassurance I was after. Thanks very much!
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco MRA Phones 4 70
mobaxterm not able to change directory 28 111
LINUX CENTOS + APACHE 9 65
Using init script with Systemd: need help crafting unit file 11 81
There are no good configuration guides for HP-H3C router to LYNC on the web. :( Big statement, but we havent been able to find one yet. We did find the following document useful, but the information was not enough to use H3C router for use as a L…
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now