WAN/Public IP of IP Office

[astansbery]

WE have an IPO 500v2 I need to put a WAN/Public IP Address in it. We also have a web server hosted here as well. We are currently using one of our allotted static public IP addresses for the web server. Should I be using one of our other static public IP addresses with the IPO? I attempted to setup VPN for IPO but that caused a connection issue with our web server. So I had to disable it for now. So with our web server setup to use the one WAN/public ip address should I be using one of the other available ones for the IPO?

 

[tlpeter]

One advise -> don't do it.
Put in a firewall or session border controller which has the external IP address.


BAZINGA!

I'm not insane, my mother had me tested!

 

[astansbery]

There is a firewall in place and it is directing traffic on the one ip address to the web server. If I set up in the firewall to use one of our other ip addresses for the IPO via VPN would that be ok?

 

[amriddle01]

The system doesn't need to go on the Internet, the only time people tend to try is when using crap SIP providers that don't have SBCs and insist the system send the external IP, if it's for a VPN then you shouldn't use the system anyway as even Avaya say not to do it for voice/critical traffic due to the fact it's pants at VPN

 

[intrigrant]

Just don't put the IP Office on a public net, and if necessery open only those ports which are really needed, allow only access from trusted locations, use very strong passwords, certificates and whatever you can think of to lock down access.
Forget one and you'll be hacked in no time leaving you with a hughe bill...

 

[astansbery]

Ok so we have an external worker that we are trying to setup the ability to use an Avaya 9611g phone outside of the office that connects over the net to the IPO. I have been advised that setting up VPN is the best way to do this. When I turned on the VPN feature of our firewall for the current public IP address it caused connection issues with the web server.