Re: TLS and NAT

Michael Maier <[email protected]>
Newsgroups gmane.comp.telephony.pbx.asterisk.user
Message-ID <[email protected]>
Hello Steve,

use the following configuration for the transport and bind this 
transport to the trunk:

[transport_name]
type=transport
protocol=tls
bind=192.168.13.24 ; your bind IP
ca_list_file=/etc/pki/tls/certs/ca-bundle.crt
; method=tlsv1_2
verify_server=yes
allow_reload=no
;tos=0xb8
;cos=3
external_media_address=your.ext.host.name ; hostname pointing to your 
ext. IP
external_signaling_address=your.ext.host.name ; hostname pointing to 
your ext. IP
local_net=192.168.0.0/24 # your local net


Regards
Michael

On 07.04.23 at 17:25 Steve Matzura wrote:
> I want to configure communication with my phone provider using TLS for 
> all the obvious reasons. Since I'm behind a firewall, I'll be needing to 
> do it with NAT. There are examples of UDP plus NAT in pjsip.conf, but 
> none for TLS plus NAT. Would it be correct to set up the TLS transport 
> stanza to look like the [transport-udp-nat] stanza example, replacing 
> UDP with TLS in lines like 'transport=tls' and 'protocol=tls', and 
> including the lines for local_net, external_media_address and 
> external_signaling_address?
> 

-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
      https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.