remote ip-phones and no vpn

[jsaad]

can this be done? I have a BCM1000 w/ 3.6 software and I've heard people can get their remote phones working without the VPN by using a public IP on one of the lan interfaces? Ideally I would like to move away from the VPN. Can it be done and if you know, what sort of configuration is required?

 

[gwebster]

This is NOT a good idea. Do you really want an IP address on your BCM exposed to the public internet?

 

[jsaad]

yes, i'm willing to try it. this is a bcm i use for testing in my office.

 

[dulfo666]

The problem is that you do not need to access just one IP address.

1. You have the Node IP address of the BCM that the phone will register to.

2. You have ALL the IP addresses of the other phones that you will be calling on your BCM. THe BCM is only there to establish the call. Once established it is Phone to Phone. You could in effect switch off the BCM and you wouldnt notice.

 

[gwebster]

As dulfo666 points out, media path is direct between IP Phone to IP Phone. Even media path from the IP Phone to the BCM (for digital sets) can use a large range of UDP ports.

If you do not have all of these IP addresses/ports accessible to the remote IP Phone, then you will end up with a situation of "one-way speech" - i.e. phone will ring/ringback but not hear anything.