9608 remote ip setup

[tipandring70]

Can a 9608 be configured at someone's house like this:
Public address of a broadband port to netgear WNR2000V4 wan port.
and then go from the lan port to wan port of ipo (192.168.43.1).
Netgear router lan is configured to 192.168.43.0/24 gateway is .2
Port forward 1719-1720, 49152-53246,5060, and 5005, from public address to 192.168.43.1

Setup phone with call server, http, https all to the public address

 

[snowman50]

You need a static public IP address at the ip office site router
Then port forward those ports to the ip office.

You then need to run stun on the ip office with a stun server to translate the nat.

Then you need to tell the ip phone the static IP address assigned to the router as it's call server address.

 

[tipandring70]

Thanks Snowman,
I did not know about entering the public address on the Lan 2 tab.

 

[Westi]

also the firewall setting in there determines the encapsulation for it. You can use STUN to determine the public IP and the settings if you like the only thing is that it increases the time after a reboot before it gets ready.
You can also use STUN 1 time and then turn STUN off and leave the other settings.

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[Gunnaro]

Port forward 1719-1720, 49152-53246,5060..

49152-53246, that range will cover all the management ports for the IPO.
Not a good idea. Stay below 50750, and make sure you have all the other security settings in order.

Kind regards

Gunnar
______________________________________
Mille viae ducunt homines per saecula Romam

 

[snowman50]

No I didn't mean enter the public address to LAN 2 .
They way I do it is to have a public static IP address for your router from your internet provider eg:81.123.65.78
Then port forward the ports to the IP address you have for your ipo.192.168.43.1

Run stun this should pick up the public IP address.81.123.65.78

Enable remote worker for your extn and assign a strong login password for the phone.

 

[IPGuru]

Get a professional in to do this for you if you do not want your stem hacked!

Also whilst Nat traversal like this is possible it can be unreliable depending on the homeworkers ISP

a far better solution is to use the VPN firmware in the handsets to create a secure connection to the office system but this does require a suitable IPSec VPN solution


A Maintenance contract is essential, not a Luxury.
Do things on the cheap & it will cost you dear