How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English
-
Upload
askozia -
Category
Technology
-
view
94 -
download
1
Transcript of How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English
![Page 1: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/1.jpg)
![Page 2: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/2.jpg)
Your Hosts
Markus Ehlers Benjamin-Nicola Lüken
![Page 3: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/3.jpg)
Agenda
•Why is a VPN required to connect external phones?
• Basic knowledge about how a VPN works
• How to configure pfSense as an VPN server
• How to configure a Snom phone as a VPN client
![Page 4: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/4.jpg)
Why VPN? Because SIP port forwarding is not recommended
•Open ports are a serious vulnerability • Bots are searching for open SIP ports • Brute-Force-Attacks • DDoS-Attacks
• SIP is not encrypted • A man in the middle could read meta data and audio
• Port and IP addresses are wrong • No audio •One way audio •Works sporadically
![Page 5: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/5.jpg)
Always with a VPN Security, Reliability, Less issues
• No open SIP ports • No target for a hacker
• VPN can be encrypted • Nobody can see your SIP registration or calls
• No audio problems • It works like a phone within the company’s local network • No need to think about the network of the home office
![Page 6: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/6.jpg)
Application
Presentation
Session
Transport
Network
Data Link
Physical
SIP
IP
MAC
![Page 7: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/7.jpg)
Application
Presentation
Session
Transport
Network
Data Link
Physical
SIP
IP
Laye
r 2 (S
witc
h)
Laye
r 3 (R
outin
g)
SIP-
ALG
, SIP
-Pro
xy
MAC
![Page 8: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/8.jpg)
Application
Presentation
Session
Transport
Network
Data Link
Physical
SIP
IP Network IPe.g. 216.123.123.123
SIP IPe.g. 192.168.1.5
Laye
r 2 (S
witc
h)
Laye
r 3 (R
outin
g)
SIP-
ALG
, SIP
-Pro
xy
Dee
p Pa
ckag
e In
spec
tion
MAC
![Page 9: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/9.jpg)
Application
Presentation
Session
Transport
Network
Data Link
Physical
SIP
IP
Laye
r 2 (S
witc
h)
Laye
r 3 (R
outin
g)
SIP-
ALG
, SIP
-Pro
xy
MAC
Application
Presentation
Session
Transport
Network
Data Link
Physical
SIP
IP
MACLayer 2 VPN Bridging (TAP)
Layer 3 VPN Routing (TUN)
![Page 10: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/10.jpg)
VPN Example
Internet
Askozia192.168.10.50
Router180.123.123.123
10.99.0.55
NAT IPv410.99.0.0/24
NAT IPv4192.168.10.0/24
Firewall/Router240.123.123.123
VPN-Server
Without VPN:SIP-IP: 10. 99. 0. 55Layer 3 IP: 180.123.123.123
With VPN:SIP-IP: 192.168.10.10Layer 3 IP: 192.168.10.10
192.168.10.10
VPN
My CompanyHome Office
![Page 11: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/11.jpg)
How to configure?
•Configure a VPN server • Create certificates (CA and Server certificate) • Create OpenVPN server (tap) • Install OpenVPN Export package • Create a firewall rule for VPN
•Prepare/Configure a SNOM phone • Prepare the Firmware • Export a VPN configuration •Modify the VPN configuration • Upload the VPN configuration
An example with pfSense
![Page 12: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/12.jpg)
![Page 13: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/13.jpg)
![Page 14: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/14.jpg)
![Page 15: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/15.jpg)
![Page 16: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/16.jpg)
![Page 17: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/17.jpg)
![Page 18: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/18.jpg)
![Page 19: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/19.jpg)
![Page 20: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/20.jpg)
![Page 21: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/21.jpg)
![Page 22: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/22.jpg)
![Page 23: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/23.jpg)
![Page 24: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/24.jpg)
![Page 25: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/25.jpg)
![Page 26: How to connect external IP phones with AskoziaPBX through VPN - webinar 2016, English](https://reader031.fdocuments.us/reader031/viewer/2022022001/58d068f01a28ab10448b62e5/html5/thumbnails/26.jpg)