Using ser 0.8.14 from cvs, I have a question regarding the example nathelper.cfg file. The file is in sip_router/etc/nathelper.cfg
# !! Nathelper # Special handling for NATed clients; ....
I'd like to understand if clients are considered NATed in my configuration. I have ser running on the NAT box itself (FreeBSD 4.10-Stable). There is one public address, and several private subnets. SER running on this box is the sip proxy for all clients on the private subnets.
In this topology, would the UA's on the private subnets be considered "NATed clients" and thus pass the nat_uac_test("3") test in this nathelper.cfg file? Or does this test only apply when NAT exists between SER and the clients?
Thanks, MikeC
Provided all clients are inside your perimeter and not having another NAT in front of them, you can safely use SER without NAT. Just make sure you specify:
listen=xxx where xxx is the private of your FreeBSD box.
Note that it will not communicate well with outside world in this configuration. If you need that, than yes, your clients will be detected as NATed and you have to use the public IP interface for SER.
Zeus
-----Original Message----- From: serusers-bounces@lists.iptel.org [mailto:serusers-bounces@lists.iptel.org] On Behalf Of Michael C. Cambria Sent: Tuesday, 31 August 2004 12:42 PM To: serusers@lists.iptel.org Subject: [Serusers] NAT + Clients directly connected to SER
Using ser 0.8.14 from cvs, I have a question regarding the example nathelper.cfg file. The file is in sip_router/etc/nathelper.cfg
# !! Nathelper # Special handling for NATed clients; ....I'd like to understand if clients are considered NATed in my configuration. I have ser running on the NAT box itself (FreeBSD 4.10-Stable). There is one public address, and several private subnets. SER running on this box is the sip proxy for all clients on the private subnets.
In this topology, would the UA's on the private subnets be considered "NATed clients" and thus pass the nat_uac_test("3") test in this nathelper.cfg file? Or does this test only apply when NAT exists between SER and the clients?
Thanks, MikeC
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Zeus Ng wrote:
Provided all clients are inside your perimeter and not having another NAT in front of them, you can safely use SER without NAT. Just make sure you specify:
listen=xxx where xxx is the private of your FreeBSD box.
At present I listen on 3 IP interfaces, the public one, and the 2 private ones.
Note that it will not communicate well with outside world in this configuration. If you need that, than yes, your clients will be detected as NATed and you have to use the public IP interface for SER.
Thanks. I do need both "inter-office" communication (no NAT) as well as via the public internet (via NAT). The config seems to be working (after commenting out the section that does not forward to private addresses.)
I added a log() to the route scripts to see for myself what was happening. The nat test is always true. I asked the question however because, as you say above, SER will work just fine without NAT. I wasn't sure how SER would treat the "Inter-office" calls, since NAT is not involved. I wasn't sure if my config was wrong or now.
Thanks, MikeC
-
Michael C. Cambria -
Zeus Ng