Hello all. I have a question. I'm a bit new to vlans and think that's my problem, but it could just be me overlooking the obvious.
I have 3 vlans on my LAN/vr0 port (10, 20, 30). I have connectivity working between hosts on different VLANs, but am now trying to get SIP traffic coming in from the WAN to VLAN 30. To start, I created a NAT rule on WAN for TCP5060-70 to go to 192.168.30.11 (the host I am trying to connect) and auto added the firewall rule.
NAT
WAN TCP 5060 - 5070 192.168.30.11 5060 - 5070 NAT SIP TCP 5060 to 192.168.30.11
WAN Firewall
TCP * * 192.168.30.11 5060 - 5070 NAT SIP TCP inbound to 192.168.30.11
Under the vlan 30 firewall, I have 2 rules.
* VOIP net * * * Voip Net 192.168.30.0/24 -> Any
TCP * * 192.168.30.11 5060 - 5070 Allow SIP TCP to Trixbox
I've made something similar work before, but never with VLANS.
I see it being blocked in the logs
15:51:32.588720 vr1 @0:35 b 66.191.30.201,26123 -> 24.10.160.120,5060 PR tcp len 20 64 -S IN
Could someone give me some pointers on figuring this out?
Thanks!
Aaron
Topic: VLANS and Incoming VOIP