T20P: VPN/OpenVPN - Just SIP or also RTP?

[ruiseixas]

Hi, thanks for the reply,

I'm in Algeria using the phone, and the VPN router is in Portugal. The VPN router is behind the ADSL router's firewall with all the respective ports for OpenVPN redirected to the VPN router. The phone is also behind a firewall in another WRT54GL working as gateway!

I'm using OpenVPN mainly because here the ISP blocks my local SIP ports after a while, and I always need to change them! I think it's because here they don't like VoIP, and this way the ISP avoids it to be used as an alternative to standard voice communications!

By the way, the VPN string appears in the LCD, however, when I didn't put the 'redirect-gateway' attribute the local SIP port remained blocked, only when I added that attribute the problem disappeared, so I think is better to add it! In the end the config was this:

Code:

# Specify that this is a client configuration:
client
# Check whether the server is using a TUN or TAP interface, use the same dev tun
dev tun0
# Check whether the server is using TCP or UDP protocol, use the same here:
proto udp
;proto tcp
# Specify the host name and OpenVPN port of the server:
remote ******.dyndns.org 1194
# Specify the file names of your certificates and key - these should not
# The path names must be exactly as detailed below:
ca /yealink/config/openvpn/keys/ca.crt
cert /yealink/config/openvpn/keys/client.crt
key /yealink/config/openvpn/keys/client.key

# The rest of these settings should be unchanged:
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ns-cert-type server
;comp-lzo
verb 3
mute 10
route-delay 2
redirect-gateway

One problem that remains is that if I call a number in the same LAN, the RTP traffic leaves that LAN because the SIP server works as a RTP Proxy, making the RTP traffic available in the Internet, despite being private between Algeria and Portugal! More explained here:

• http://blog.lithiumblue.com/2007/07/unde...n-sip.html
  

Regards,
Rui