Public IP for CLAN - No VPN Client

[Defender451]

Client does not want to use a VPN client. They want Soft Phone to register to a Public IP.

Do I just need to have Port forwarding on 1719UDP and 1720TCP to a CLAN's NAT'd Public IP?

What range of IP's would I specify in the new Network Region?

Is this safe?

Thank you

 

[ACECCVP]

this not gonna work dear, you need also Medpro resource which gives the phone the audio.

Clan is resonsible for call setup, Medpro for Audio. without those 2 , the phone will not work.

so you can try assign public IP to Medpro.

i have not tried to publish CLAN AND Medpro. but lets know what will happen.

anyway , if there Is NAT envolved, i mean you are using NAT address for CLAN and Medpro this will not work. try to put the real public address only.

 

[ACECCVP]

also for pubic IP , make sure that your ISP not blocking the VOIP ports .

you need these ports

CLAN - UDP 1719 , TCP 1720
Medpro - UDP port ( range defined in the Network-region form)

 

[Defender451]

The MedPro and CLAN will have to be dedicated to this External Access from what I am understanding. Assign them to a public IP and base these subnets on the IP region...

Is this safe? Why cant someone post files the the CLAN or do something more destructive?

Thank you

 

[Mitch672]

you would have to enable the filesystem on the CLAN for someone to download files to it, and even that would not do anything, until you tried to "load" them to the CLAN. The CLAN and MEDPRO are fairly impervous to attacks, however, I have never heard of anyone doing this successfully (most use a VPN, because they don't want to buy extra MEDPROs and CLANs, to start with..)



Mitch

AVAYA Certified Expert