It is possible to run openVPN in TCP mode over an SSH tunnel. Don't turn compression on on both though - I'd just switch it on the openVPN if you have to.
You will probably find the speech is rather choppy due to the delays and fragmentation, but I have done this. Peter -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of bilal ghayyad Sent: 18 January 2008 12:21 To: [email protected] Subject: Re: [asterisk-users] Two Asterisks behind NAT and need to link themusing IAX trunk Hi; Via OpenVPN or port forwarding is known for me, but via SSH is new for me, how I can do it and what is the difference by SSH and OpenVPN? Regards Bilal ----------------------------- Good question. I have never tried tunneling IAX over SSH but it seems like it should work just like anything else. How about a port opened up for OpenVPN. You know you can run IAX on any port you wish, port 80 may work for you if you have some extra external IPs not being used for HTTP. The same is true for OpenVPN. Thanks, Steve Totaro On Jan 17, 2008 8:09 PM, John Constalgie <[EMAIL PROTECTED]> wrote: > > Hi there > > this is an interesting topic that I see here and a problem that I am > trying to solve too. > > But I was wondering if the forwarding solution will work for my case. > > So I have two Asterisk boxes A and B. > > A is behind a corporate NAT such that A can SSH to B, but not vice versa( > "One-way SSH" ) . The UDP port 5060 of the corporate NAT is blocked off and > I will not be able to have it unblocked for security reasons. > > Hence, is my only choice using an SSH tunnel between A and B for the IAX > connection to work? Will it work though with that "One-way SSH" factor > mentioned before? > > Thanks > John ________________________________________________________________________ ____________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
