IAX_OpenVPN
Created by: cwidger,Last modification on Tue 08 of May, 2007 [11:07 UTC] by JustRumours
It's possible to run an IAX2 channel over OpenVPN.
openvpn.conf
dev tun
float
remote 3.4.5.6
ifconfig 10.0.0.1 10.0.1.1
port 1234
secret /usr/local/etc/openvpn/secret.key
verb 5
daemon
iax.conf:
[iax-vpn]
type=friend
context=from-trunk
username=user
authname=user
auth=rsa
qualify=yes
inkeys=iaxinkey
outkey=iaxoutkey
host=10.0.0.1
disallow=all
;allow=gsm
allow=alaw
allow=ulaw
trunk=yes
notransfer=yes
deny=0.0.0.0/0.0.0.0
permit=10.0.0.1/255.255.255.255
This adds some extra security with an rsa key on the IAX trunk
I've experienced minor packet loss over but no dropped calls. The trunk will show the following error, "TOO LAGGED," but quickly report, "now REACHABLE." The source of this problem is related to running out of bandwidth on my DSL connection. Since I turned on QoS the error report happens less often. Calls can get a bit of jitter when this problem is occurring, but I'm happy to report I haven't experienced drop calls.
Feb 5 04:51:59 NOTICE17712: chan_iax2.c:7238 socket_read: Peer 'sc-trunk' is now TOO LAGGED (2180 ms)!
Feb 5 04:52:09 NOTICE17712: chan_iax2.c:7232 socket_read: Peer 'sc-trunk' is now REACHABLE! Time: 97
Howto:
- Place the following on both ends of your trunk. Switch the IP address on the ifconfig line so the second file is reverse.
openvpn.conf
dev tun
float
remote 3.4.5.6
ifconfig 10.0.0.1 10.0.1.1
port 1234
secret /usr/local/etc/openvpn/secret.key
verb 5
daemon
- Now setup your Trunk on both ends
iax.conf:
[iax-vpn]
type=friend
context=from-trunk
username=user
authname=user
auth=rsa
qualify=yes
inkeys=iaxinkey
outkey=iaxoutkey
host=10.0.0.1
disallow=all
;allow=gsm
allow=alaw
allow=ulaw
trunk=yes
notransfer=yes
deny=0.0.0.0/0.0.0.0
permit=10.0.0.1/255.255.255.255
This adds some extra security with an rsa key on the IAX trunk
I've experienced minor packet loss over but no dropped calls. The trunk will show the following error, "TOO LAGGED," but quickly report, "now REACHABLE." The source of this problem is related to running out of bandwidth on my DSL connection. Since I turned on QoS the error report happens less often. Calls can get a bit of jitter when this problem is occurring, but I'm happy to report I haven't experienced drop calls.
Feb 5 04:51:59 NOTICE17712: chan_iax2.c:7238 socket_read: Peer 'sc-trunk' is now TOO LAGGED (2180 ms)!
Feb 5 04:52:09 NOTICE17712: chan_iax2.c:7232 socket_read: Peer 'sc-trunk' is now REACHABLE! Time: 97
Comments
333VPN for VoIP Blocking
Currently I am using the VGCP, a new solution to solve the VoIP Blocking issue. Following is theirs website:
http://www.speed-voip.com/index-36.html
If any of you have interested, you may try to use it to solve your VoIP Blocking problems. Thanks.
Andy
andywong-01@hotmail.com