SCN both ends firewalled no VPNs

[KatzEye1]

Hello folks and Happy New Year!!

we have a client that has 2 sites, with a 406v1 and an SOE both 3.2.57

We want to IP link them for internal calls and transfers as well as to use 1 of the DDIs on the 406 site but for reasons out of my control they can not have a VPN set up to link the 2 LANs over the internet.

Can SCN be set up with port forwarding on the 2 firewalls at either end? I know from the FAQ that there is 1 UDP port at least needed...

cheers!

 

[mattKnight]

No

You will have issue after issue with this, and you will have to open the firewall so wide, it will constiute a risk in itself

h323 does not work well without vpn. Your customer needs to re-evaluate their priorities and networking

Take Care

Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.

 

[tlpeter]

Indeed, you can not use a ddi over the internet without issues

It will leave a bad experience at the customer and then the product will be blamed as bad while it is not !



ACA - Implement IP Office
ACS - Implement IP Office
ACA - Implement IP Telephony
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[KatzEye1]

hi guys ok i convinced them to go with vpn and we have an ipsec tunnel now, SCN works, BUT...this is 3.2, they want 1 DDI in HQ to ring at both sites, normally in 4.0+ i would make 1 hunt group with all users, but in 3.2 i cant. how can i solve this?

i have tried making a user in HQ site with forwarding to ext 1201 (short code for calling the hunt group in Branch site over SCN) which i then added to the local hunt group of the DDI HQ, but that doesnt work, when i try ringing that user, Monitor says: "CMTARGET: Off Switch Call Inhibited for line 5" even when all "inhibit off switch forward" options are unticked...

any ideas?